Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments
Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves creating lookalike websites of major Russian companies with...
details
Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
Swati KhandelwalJul 27, 2026Vulnerability / Website Security Public exploit details released on July 27 show how an unauthenticated request can...
Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs
Ravie LakshmananJul 22, 2026Linux / Vulnerability Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in...
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Ravie LakshmananJul 22, 2026Vulnerability / Browser Security Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe...
Details of Alan Turing’s Voice Encryption System
Details of Alan Turing’s Voice Encryption System Really interesting piece of cryptographic history: In November 2023, a large cache of...
OpenAI’s GPT-Red Automates Prompt Injection Testing to Harden GPT-5.6 Sol
OpenAI has disclosed details of GPT-Red, an internal automated red-teaming model that scales prompt injection vulnerability discovery with an aim...
TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development
Cybersecurity researchers have disclosed details of a previously unreported Internet-of-Things (IoT) botnet framework dubbed TuxBot v3 Evolution that shows signs...
RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata
Ravie LakshmananJul 14, 2026Vulnerability / Network Security Cybersecurity researchers have disclosed details of two access control-related flaws impacting the RabbitMQ...
Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns
Cybersecurity researchers have disclosed details of sustained cyber espionage activity against several Pakistani law enforcement organizations undertaken by suspected China-...
Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes
Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious...
Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
Ravie LakshmananJun 22, 2026AI Security / Vulnerability Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic...
New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer
Ravie LakshmananJun 22, 2026Malvertising / Endpoint Security Cybersecurity researchers have disclosed details of a new campaign that delivers CastleStealer by...
Privacy own-goal: World Cup blunder leaks Lionel Messi’s passport details
According to media reports, a security blunder carelessly leaked the passport details of every player in Argentina's World Cup squad...
Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2
Ravie LakshmananJun 18, 2026Malware / Cryptocurrency Microsoft has disclosed details of a Windows-based cryptocurrency clipper campaign that has targeted users...
UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign
Cybersecurity researchers have disclosed details of a financially motivated data theft extortion campaign that has targeted dozens of organizations across...
