BlueMoon chains Chrome V8 flaws with a Windows kernel exploit to deploy GemStone, ShadowPad, and Rust-based malware in ...

Valve's maintainer on the Proton issue tracker answered a request to merge a crash fix for Warhammer 40,000: Space Marine 2 ...

Google's PageBreak AI security agent found 500+ verified XSS flaws by testing suspected vulnerabilities against live applications.

A group of VS Code theme extensions linked to GlassWorm, a malware campaign targeting developers. Their investigation ...

Morning. I looked at my house with a feeling of pride, just a little more than yesterday. The house is standing. The walls are painted. The text is aligned. Even the button looks pretty cool. "…Not ...

Wie aus einer Warnmeldung hervorgeht, haben die Entwickler in den Ausgaben 19.4.1, 19.3.3 und 19.2.7 von GitLab Community Edition und Enterprise Edition insgesamt elf Schwachstellen geschlossen. Die ...

This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. A search answer. A coding tool. A link you have clicked a hundred times before. That is the thread ...

SlowMist confirms an active iOS exploit that steals crypto private keys via Safari, affecting iPhones running iOS 13 through 26.5.

Noteworthy stories that might have slipped under the radar: Mandiant’s 2026 AI risk report, PhantomRaven malware used by bug bounty hunter, WordPress plugin bug exploited. SecurityWeek’s weekly ...

CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions. A critical-severity vulnerability in Orkes Conductor that can be ...

A serious VS Code flaw lets attackers gain persistent workstation access with one click in a malicious project, bypassing Workspace Trust via clickable editor links.

Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites to distribute malware.