Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes
Ravie LakshmananJun 03, 2026Vulnerability / Network Security Cybersecurity researchers have disclosed details of an unpatched issue that could be exploited...
Blog
New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare
Ravie LakshmananJun 03, 2026Vulnerability / Server Security Cybersecurity researchers have discovered a remote denial-of-service exploit that affects major web servers,...
Cisco Live 2026: New Security Tools Target AI Threats
This week’s Cisco Live event in Las Vegas featured a raft of product announcements as the company prepares its portfolio...
Why an HP Poly VoIP Phones Bug Could Become an Enterprise Foothold
Why an HP Poly VoIP Phones Bug Could Become an Enterprise Foothold Pierluigi Paganini June 03, 2026 Rapid7 details a...
Welcoming the Philippine Government to Have I Been Pwned
03 June 2026 Today, we welcome the 46th government onboarded to Have I Been Pwned’s free gov service: the Philippines.The...
Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content
Cybersecurity researchers have flagged a new campaign targeting Minecraft players via YouTube to spread malware capable of gaining control of...
Pointing a Cursor at evading detection
Sophos X-Ops analysts observed a threat actor using artificial intelligence (AI) technologies to test endpoint detection and response (EDR) evasion...
The AI Exchange: Innovators in Payment Security Featuring In-Solutions Global Ltd
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature...
Instagram Account Hijacks Expose the Security Risks of AI-Powered Support
Instagram Account Hijacks Expose the Security Risks of AI-Powered Support Pierluigi Paganini June 02, 2026 Attackers exploited Meta’s AI support...
U.S. CISA adds Oracle WebLogic flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Oracle WebLogic flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 02, 2026 U.S. Cybersecurity and...
Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited
Ravie LakshmananJun 02, 2026Vulnerability / Mobile Security Google on Monday released patches for 124 security vulnerabilities impacting its Android operating...
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine
Ravie LakshmananJun 02, 2026Threat Intelligence / Malware The Russian hacking group known as Gamaredon has been attributed to the continued...
Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation
Ravie LakshmananJun 02, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity...
Fake Claude Code Installers Deliver Credential-Stealing Malware
Developers searching for Claude Code installation instructions may be walking into a sophisticated malware campaign that masquerades as legitimate AI...
Google Patches Android Zero-Day Vulnerability in June 2026 Security Update
Google’s June 2026 Android security release addresses dozens of vulnerabilities across the operating system, including one flaw that the company...