Cyber Kendra

Security researcher Fatih Çelik has disclosed yet another critical remote code execution (RCE) vulnerability in n8n, the popular open-source workflow…

For nearly a decade, a suspected Chinese state-backed hacking group quietly burrowed into the world's phone networks — and they did it hiding in …

Anthropic has uncovered one of the most sophisticated AI theft operations to date — and the evidence points directly at three Chinese labs. In a disc…

A software coding error — not a hacker — is behind PayPal's latest data breach disclosure. The company began sending formal breach notification l…

A new Android backdoor called Keenadu was shipped inside tablet firmware before devices ever reached consumers' hands — and it's already clai…

Brave Software researchers have disclosed critical vulnerabilities in zkLogin, a widely-deployed blockchain authentication system used across the Sui…

Nation-state hackers have crossed a troubling threshold: they're now weaponising commercial AI to generate malicious code dynamically during acti…

Ivanti just patched a critical authentication bypass in its Endpoint Manager that hands attackers stored credentials on a silver platter—no login req…

A critical security vulnerability in manga-image-translator, a widely used open-source OCR tool with over 9,300 GitHub stars, allows attackers to exe…

Microsoft patched a serious security hole in Windows Notepad this week that could allow attackers to remotely execute malicious code on victims' …

Application security did not become harder because organisations lack tools. It became harder because risk no longer lives in one place. Modern appli…

Thousands of organisations running BeyondTrust's remote access tools face immediate risk after an AI security system uncovered a critical pre-aut…

Photo-sharing platform Flickr has disclosed a security incident involving unauthorised access to user information through a vulnerability in one of i…

A newly disclosed vulnerability in NGINX web servers could allow attackers positioned between servers and upstream systems to manipulate data flowing…

The popular text editor Notepad++ has confirmed what security researchers feared: Chinese state-sponsored hackers successfully hijacked its update me…

UPDATE (February 3, 2026): Virtualizor has released an official statement clarifying the attack vector. The company confirms there is no …

In a watershed moment for AI security, an autonomous hacking agent has successfully exploited another AI system, exposing a critical vulnerability in…

Microsoft's flagship security upgrade for Windows 11 had a close call: a researcher found nine different ways to bypass it during testing. Google…

Security researchers at Horizon3.ai have uncovered a chain of critical vulnerabilities in SolarWinds Web Help Desk (WHD) that allows unauthenticated …

Six months after a critical WinRAR vulnerability was patched, hackers from Russia, China, and cybercrime groups continue to exploit it—turning a fixe…