Perseus is a new Device Takeover (DTO) malware family that specifically looks for user-generated content stored in note taking applications.

Breaking News: TeamPCP has gone open source — and the copycats are already here. The group behind Shai-Hulud has leaked their own malware code to GitHub, and independent threat actors have already begun modifying it and expanding its reach. OX Security is…

CVE-2026-20182: Cisco SD-WAN Authentication Bypass via vHub (ASM Queries Only), CVE-2026-42945: NGINX ngx_http_rewrite_module Heap-Based Buffer Overflow (Queries and Signatures Only), CVE-2026-42167: ProFTPD mod_sql USER SQL Injection Pre-Auth RCE, CVE-2024…

Four malicious npm packages were uploaded to npm by the same threat actor, including a non-obfuscated Shai-Hulud clone Breaking NewsFour new npm packages were detected & reported by OX Security:- chalk-tempalte- @deadcode09284814/axios-util- axois-utils-…

We wanted to tell you how to address the Exchange Server May 2026 vulnerability CVE-2026-42897.

 

poc it like it's hot. Contribute to v12-security/pocs development by creating an account on GitHub.

The popular GitHub Action actions-cool/issues-helper has been compromised. Every existing tag in the repository has been moved to point to a single imposter commit that does not appear in the action's normal commit history. That commit contains malicious…

Attached: 1 video

back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member

in edge, you wouldn't even notice anything out-of-place, and would stay connected to the c2 even…

Fox Tempest is a financially motivated threat actor operating a malware‑signing‑as‑a‑service (MSaaS) used by other cybercriminals, including Vanilla Tempest and Storm groups, to more effectively distribute malicious code, including ransomware.

Introducing nginx-poolslip, a fresh RCE for the the latest nginx release 1.31.0.

nginx-rift has been patched, but our security agent Vega has found a new 0 day.

We will release the full technical writeup with ASLR bypass 30 days after the patch on ht…

Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises. - perplexityai/bumblebee

Rapid7 researchers found that Gogs allows authenticated users to achieve RCE on the server by creating a pull request with a specially crafted branch name. More in our latest analysis blog.

Harnessing LLMs into composing complex, multihop vulnerability chains to discover CVE-2026-46243

If you or your child plays Minecraft, here's what you need to know about a large-scale malware campaign McAfee Labs just uncovered, and what to do about it.

“Quasi-random” network topologies and new passive optical components called ShuffleBoxes make more-efficient flat networks as practical as traditional “fat-tree” networks.

GreatXML bitlocker bypass vulnerability. Contribute to MSNightmare/GreatXML development by creating an account on GitHub.

A network of 152 Chrome live wallpaper extensions hid ad tracking and made extension-driven traffic look like Google search clicks.

The Huntress SOC has seen a recent uptick in incidents involving compromised Bomgar remote monitoring and management (RMM) instances.