Microsoft's SCCM Hotfix Fixes Only One of Four RCE Bugs
Security researcher Omri Baso has disclosed a remote code execution chain in Microsoft Configuration Manager (SCCM/ConfigMgr) that lets an ordinary…
Security
Apple Warns iPhone Users of Mercenary Spyware Attacks
Apple sent a fresh round of mercenary spyware threat notifications to users in 110 countries on Thursday, and for the first time, the warning lands a…
Trezor Says ShipMonk Breach Exposed 13,689 Customers
Nearly 14,000 people who bought a Trezor hardware wallet this summer now have their names and home addresses sitting in the hands of an unknown attac…
CVE-2026-63520: SharePoint RCE Patched by Microsoft
Rapid7 and Microsoft have disclosed CVE-2026-63520 , a remote code execution flaw in Microsoft SharePoint that completes an unauthenticated exploit c…
LiteLLM Breach Exposed 434,000 CI/CD Pipelines, 2,500 Firms
Two threat intelligence firms have published victim data from the March 2026 LiteLLM supply chain attack, and the scale is far beyond anything known …
ShieldBreak PoC Bypasses Microsoft's RoguePlanet Defender Fix
Security researcher Nightmare Eclipse has released ShieldBreak , a proof-of-concept exploit that defeats the patch Microsoft shipped five weeks ago f…
Microsoft Leaves Windows Passkey Prompt Spoofing Unfixed
Three weeks before Microsoft makes passkeys the default sign-in method for Entra ID , new research shows that the Windows dialog protecting them can …
Windows 11 Kernel 0day PoC Drops Before Patch Tuesday
An anonymous researcher has published proof-of-concept (PoC) code for what they describe as an unpatched local privilege-escalation flaw in Windows 1…
DeadLock Ransomware Puts Its Negotiation Portal On-Chain
Every ransomware crew eventually loses its website. DeadLock's operators appear to have decided not to have one. Microsoft Threat Intelligence ha…
Researchers Buy 'No Reply' Domains and Get Company Data
Fifteen dollars is roughly what it costs to start reading email your company thinks nobody receives. Two security researchers who quietly bought plac…
.png.webp)
Metabase Zero-Day Exposes Framework, Tally Customer Data
Two companies told customers this week that their personal data had been stolen. Neither was breached directly. The attacker walked in through the an…
Public Exploit Lands for WordPress XSS2Shell Core Flaw
A working proof-of-concept exploit for " XSS2Shell " is now circulating publicly, raising the stakes on a WordPress Core flaw that turns a …
Zapscape KVM Flaw Lets Guest VMs Seize Host Root
Security researcher Hyunwoo Kim closed out his KVM escape trilogy today with Zapscape (CVE-2026-64561) , and this time he shipped the whole thing. W…
Mac Malware Checks Your GPU Before Showing Its Lure
The crews behind a long-running macOS scam have started doing something defenders usually do: vetting who is on the other end of a connection before …
Researchers Chain WordPress RCE to Fileless Linux Root
Security researchers have shown that the critical wp2shell WordPress flaw doesn't have to stop at a web shell — it can be chained all the way to…
Human Reviewer Caught AI Agent's Malware Pull Request
The thing that stopped an AI agent from poisoning a public open-source project last month wasn't a firewall, a classifier, or a sandbox. It was o…
Phishers Abuse Service Workers to Hijack Microsoft Logins
A phishing campaign documented by Kaspersky turns an ordinary browser feature into a credential-stealing proxy, letting attackers walk away with Micr…