Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts
South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used...
four
Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware
Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from...
Update Chrome Now: Google Fixes 18 Security Flaws, Including Critical Bugs
Eighteen bugs, four of them critical, and one browser update stand between your computer and a bad time. Google pushed...
Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
Ravie LakshmananJun 22, 2026AI Security / Vulnerability Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic...
‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm
For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay...
Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware
Ravie LakshmananMay 18, 2026Supply Chain Attack / Botnet Cybersecurity researchers have discovered four new npm packages containing information-stealing malware, one...
Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence
Ravie LakshmananMay 15, 2026Vulnerability / AI Security Cybersecurity researchers have disclosed a set of four security flaws in OpenClaw that...
Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution
Ravie LakshmananApr 16, 2026Vulnerability / Network Security Cisco has announced patches to address four critical security flaws impacting Identity Services...
Z.ai unveils GLM-5.1, enabling AI coding agents to run autonomously for hours
“This matters in four key ways,” Jain said. “First, cost. Pricing is much lower than for premium models, and self-hosting...
This month in security with Tony Anscombe – March 2026 edition
The past four weeks have seen a slew of new cybersecurity wake-up calls that showed why every organization needs a...
When AI Writes the Code, What Changes for Security?
Last week at RSAC 2026, we hosted four security leaders for a breakfast panel to talk about what’s actually...
QNAP fixed four vulnerabilities demonstrated at Pwn2Own Ireland 2025
QNAP fixed four vulnerabilities demonstrated at Pwn2Own Ireland 2025 Pierluigi Paganini March 23, 2026 QNAP fixed four vulnerabilities shown at...
Malicious NuGet Packages Stole ASP.NET Data; npm Package Dropped Malware
Ravie LakshmananFeb 25, 2026Cybersecurity / Malware Cybersecurity researchers have discovered four malicious NuGet packages that are designed to target ASP.NET...
SolarWinds Patches 4 Critical Serv-U 15.5 Flaws Allowing Root Code Execution
Ravie LakshmananFeb 25, 2026Vulnerability / Windows Security SolarWinds has released updates to address four critical security flaws in its Serv-U...
SolarWinds patches four critical Serv-U flaws enabling root access
SolarWinds patches four critical Serv-U flaws enabling root access Pierluigi Paganini February 24, 2026 SolarWinds addressed four critical Serv-U vulnerabilities...
