Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses
Ravie LakshmananAug 06, 2026Vulnerability / Network Security Cybersecurity researchers have disclosed a security issue with Apple's iCloud Private Relay tool...
Security Cybersecurity
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass
Ravie LakshmananJul 29, 2026Vulnerability / Enterprise Security Cybersecurity researchers have shared additional technical details about a recently patched critical security...
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Ravie LakshmananJul 22, 2026Vulnerability / Browser Security Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe...
RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata
Ravie LakshmananJul 14, 2026Vulnerability / Network Security Cybersecurity researchers have disclosed details of two access control-related flaws impacting the RabbitMQ...
GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses
Ravie LakshmananJul 09, 2026Malware / Endpoint Security Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the...
Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts
Ravie LakshmananJul 01, 2026Password Security / Cloud Security Cybersecurity researchers have warned of a "massive, ongoing, automated password spray attack"...
Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks
Ravie LakshmananJun 24, 2026Open Source / Supply Chain Security Cybersecurity researchers have flagged a new class of CI/CD workflow weakness...
Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT
Ravie LakshmananJun 23, 2026Supply Chain Attack / Developer Security Cybersecurity researchers have discovered a set of malicious npm packages that...
Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT
Ravie LakshmananJun 23, 2026Supply Chain Attack / Developer Security Cybersecurity researchers have discovered a set of malicious npm packages that...
New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer
Ravie LakshmananJun 22, 2026Malvertising / Endpoint Security Cybersecurity researchers have disclosed details of a new campaign that delivers CastleStealer by...
INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023
Ravie LakshmananJun 18, 2026Vulnerability / Enterprise Security Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS)...
FlutterShell Backdoor Spreads to macOS via Malicious Google and YouTube Ads
Ravie LakshmananJun 04, 2026Malvertising / Browser Security Cybersecurity researchers have shed light on a macOS malvertising campaign codenamed Operation FlutterBridge...
Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes
Ravie LakshmananJun 03, 2026Vulnerability / Network Security Cybersecurity researchers have disclosed details of an unpatched issue that could be exploited...
New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare
Ravie LakshmananJun 03, 2026Vulnerability / Server Security Cybersecurity researchers have discovered a remote denial-of-service exploit that affects major web servers,...
Gitea Vulnerability Exposes Private Container Images without Authentication
Ravie LakshmananMay 27, 2026Vulnerability / Software Security Cybersecurity researchers have disclosed a security flaw in Gitea, an open-source, self-hosted platform...
