Rapid7 researchers found that Gogs allows authenticated users to achieve RCE on the server by creating a pull request with a specially crafted branch name. More in our latest analysis blog.

Harnessing LLMs into composing complex, multihop vulnerability chains to discover CVE-2026-46243

If you or your child plays Minecraft, here's what you need to know about a large-scale malware campaign McAfee Labs just uncovered, and what to do about it.

“Quasi-random” network topologies and new passive optical components called ShuffleBoxes make more-efficient flat networks as practical as traditional “fat-tree” networks.

GreatXML bitlocker bypass vulnerability. Contribute to MSNightmare/GreatXML development by creating an account on GitHub.

A network of 152 Chrome live wallpaper extensions hid ad tracking and made extension-driven traffic look like Google search clicks.

The Huntress SOC has seen a recent uptick in incidents involving compromised Bomgar remote monitoring and management (RMM) instances.

PixelSmash (CVE-2026-8461) is a CVSS 8.8 FFmpeg flaw discovered by JFrog Security Research. A crafted 50 KB media file enables RCE or DoS. Upgrade FFmpeg to 8.1.2.

JFrog Security Research identified two hijacked npm packages, `html-to-gutenberg` and `fetch-pacage-assets`, that used a hidden VS Code task to launch a multi-stage malware chain. The payloads used blockchain transaction data as dead drops, installed JavaScript…

Indirect prompt injection in agentic coding tools can lead to full system compromise because authorized tools allow LLMs to run shell commands, access files, and make network calls without clear user visibility.
An attacker can gain code execution using a…

Attackers can exploit LLM domain hallucinations through phantom squatting to target supply chains. Read the analysis to learn more.

Contribute to J-jaeyoung/bad-epoll development by creating an account on GitHub.

Windows ProfSvc 0day. Contribute to MSNightmare/LegacyHive development by creating an account on GitHub.

Analysis of ClickLock, a modular macOS stealer delivered via ClickFix that uses fake dialogs, kill loops, and a GSocket backdoor to steal passwords, browser data, and crypto wallets.

The Chaos ransomware group uses new malware "msaRAT" that hijacks browsers. The malware doesn't communicate directly with C2 but connects through the browser. It enables arbitrary command execution while hiding the attacker's IP from victims via WebRTC over…