A high-severity vulnerability (CVE-2026-41139) in the popular mathjs JavaScript library allows remote attackers to execute arbitrary JavaScript...
Cyber Attack
Kaspersky’s GReAT team has uncovered a sophisticated PyPI supply chain attack attributed with moderate confidence to the...
An uncovered five malicious NuGet packages published under the threat actor account bmrxntfj that typosquat widely used Chinese .NET...
A critical-severity argument-injection vulnerability, tracked as CVE-2026-40281 and covered in the advisory GHSA-q7r4-hc83-hf2q, has been disclosed in Gotenberg, a widely used...
A critical zero-day vulnerability in its PAN-OS firewall operating system, tracked as CVE-2026-0300, that is already being...
A sophisticated “low and slow” DDoS attack launched in mid-April 2026 delivered more than 2.45 billion malicious...
Threat actors have weaponized the OpenClaw agentic AI framework by publishing a fake “DeepSeek-Claw” skill that silently...
A devastating attack chain that bypasses Microsoft Entra ID (Azure AD) Conditional Access entirely, starting from a...
An uncovered a sophisticated intrusion campaign, active since at least January 2026, in which a threat actor...
In April 2026, popular video hosting platform Vimeo confirmed a significant data breach affecting approximately 119,200 users,...
