Stale GitHub Token Let ChainDrop Worm Poison Keyv, Cacheable
Jared Wray, founder and CEO of Hyphen AI and maintainer of the Keyv and Cacheable npm packages, has published a postmortem confirming that a stale f…
Latest Posts
PrettyPrague Zero-Day Exploit Hits Avast Antivirus
A security researcher known as Chaotic Eclipse has released a working proof-of-concept exploit for an unpatched privilege escalation vulnerability i…
Virtualizor Compromised via BGP Hijack, Hosts Hit Hard
A BGP hijack against Virtualizor's update infrastructure pushed a malicious package onto VPS hypervisors running the panel, handing attackers roo…
Why Speed, Not Volume Decides Your Exposure Window
Vulnerability exploitation timelines have been falling steadily for years. Frontier AI tools have made them collapse. The exposure window - the time …
cPanel Patches CVE-2026-65643 Root Code Execution Flaw
cPanel has patched CVE-2026-65643 , a flaw in its domain parking and addon domain functionality that lets an ordinary hosting customer write files an…
Next.js Patches Two Critical RCE Flaws in 15.5.24, 16.3.3
Vercel has patched two critical remote code execution flaws in Next.js: one that triggers when the framework optimizes an attacker-supplied AVIF imag…
OpenAI Cyber Defense Letter Signed by 116 Companies
OpenAI published an open letter today, calling for a global surge in cyber defence, and 116 organisations signed it — Anthropic, Google, Microsoft, A…
Core Lightning Vulnerabilities Prompt CLN Offline Warning
Blockstream’s Core Lightning team has told node operators to install an embargoed security build or shut their nodes down, after a run of AI-generate…
Signal Contact Discovery Enclave Flaws Allow Code Execution
Security research firm V12 has disclosed two vulnerabilities in Signal's Contact Discovery Service that allowed the untrusted server host to bre…
Using VPNs to Prevent IP Tracking and Network Targeting
The internet of today is a world apart from the internet of the 2000s and even of the 2010s. New industries and new technologies yield new online ris…