CYBERSECURITY
Curl to Take Summer Break from Vulnerability Reports
The curl project is set to take a month-long break from accepting vulnerability reports starting July 1, 2026. The project's submission form
Cybersecurity (1117)
CYBERSECURITY
Twenty One Zero-Days in FFmpeg
Cybersecurity firm depthfirst's autonomous security agent uncovered 21 previously unknown vulnerabilities in FFmpeg, a widely-used multimedi
CYBERSECURITY
Hackers Exploit Oracle Zero-Day in Higher Education Institutions
Hackers have exploited a major bug in Oracle's ERP software, disproportionately affecting American universities. The vulnerability was used
CYBERSECURITY
Critical Ivanti Flaw Under Attack Within 24 Hours
Hackers exploited a maximum-severity Ivanti vulnerability just a day after it was disclosed, using a publicly available proof-of-concept exp
CYBERSECURITY
Researcher Publishes Seventh Windows Zero‑Day Hours After Microsoft Patch Tuesday
A security researcher known as Chaotic Eclipse released a new Windows exploit named RoguePlanet on Tuesday evening. The disclosure came just
CYBERSECURITY
Hackers Hide Malware in Google Ad Systems
Cybersecurity experts have uncovered a sophisticated malware campaign that exploited Google's ad infrastructure to evade enterprise security
CYBERSECURITY
Path Traversal Flaw Exploited in Langflow Attacks
Attackers are exploiting a high-severity vulnerability in Langflow, an AI development platform, to write arbitrary files on exposed servers.
CYBERSECURITY
Cybersecurity Tool Put to the Test
XBOW recently gained early access to Anthropic's Mythos Preview, a cutting-edge tool for identifying vulnerabilities. The test took place ov
CYBERSECURITY
Linux Kernel Flaw Lets Unprivileged Users Gain Root Through a Single Character Error
Researchers have uncovered a critical Linux kernel vulnerability that grants untrusted users root access. The flaw, identified as CVE‑2026‑2
CYBERSECURITY
Microsoft Releases June 2026 Patch Tuesday, Addressing 200 Vulnerabilities Including Three Zero‑Day Exploits
Microsoft’s regular Patch Tuesday arrived on June 9, 2026, delivering security updates for roughly 200 software flaws. The bulletin also dis
CYBERSECURITY
iOS 27 Simplifies Compromised Password Fixes
Apple is set to release iOS 27, featuring an AI-driven password manager that can change compromised passwords with a single tap. Analysts pr
CYBERSECURITY
Apple’s AI Now Updates Compromised Passwords—What Risks Lurk Behind the Convenience
Apple unveiled a new feature at WWDC 26 that lets its on‑device intelligence automatically replace passwords flagged as compromised. The rol