Rockstar Games has been the target of several sophisticated cyberattacks, resulting in the theft of source code, a massive dataset of business records, and a playable build of Grand Theft Auto VI.
Attackers gained control of the .gh, .sl, and .as country-code top-level domains, enabling them to issue fraudulent HTTPS certificates for Google domains and other major organizations.
Apple introduces a new system to verify iPhone photos without compromising photographer anonymity or linking images to specific devices.
The BlueKit phishing-as-a-service (PhaaS) toolkit empowers cybercriminals to launch sophisticated account-hijacking campaigns within minutes, utilizing a vast template library and minimal technical expertise.
A critical command injection vulnerability (CVE-2026-91140) in Progress DataDirect's Autonomous REST Connector AI Model Generator agents allows attackers to execute arbitrary OS commands by submitting specially crafted OpenAPI or Swagger files.
SonicWall has released patches for four vulnerabilities affecting its SMA 1000 series appliances, including a critical pre-authentication Server-Side Request Forgery (SSRF) flaw.
Security researcher Oliver Fish claims to have discovered a vulnerability in OpenAI's sandbox environment that could permit unauthenticated access to paid AI models.
As Cybersecurity Awareness Month 2026 kicks off, a surge in AI-driven scams and sophisticated social engineering tactics underscores the critical need for continuous user vigilance.
The era of AI agents executing cyber attacks is here, moving beyond simple penetration tests to sophisticated, adaptive red team operations.
ClingSTUN malware is exploiting vulnerabilities in Realtek SDKs to compromise Internet of Things devices, turning them into proxy nodes. This widespread threat targets unpatched devices, highlighting the persistent risks associated with IoT security and the need for timely updates. The malware uses STUN-based communication to evade detection and maintain command and control over compromised devices, posing a significant risk to network infrastructure and user privacy. Infosecurity Magazine The Hacker News Cyber Security News
Attackers are actively exploiting critical vulnerabilities in Cisco's SD-WAN Manager, allowing for authentication bypass. This allows unauthorized access to sensitive network configurations and control, posing a severe risk to enterprise network security. The exploitation of these flaws underscores the importance of prompt patching for network infrastructure devices. The Hacker News
Warlock ransomware is actively exploiting vulnerabilities in Microsoft SharePoint, targeting critical infrastructure sectors like water and telecommunications. This campaign highlights the significant risks to operational technology (OT) environments when unpatched systems are present. The ransomware's focus on these sectors could lead to severe disruptions in essential services. Cyber Security News
The volume of disclosed vulnerabilities has surged, with Google reporting an increase to 10,000 per month, largely driven by AI-powered discovery. This trend indicates a rapidly evolving threat landscape where attackers can more efficiently find and exploit weaknesses. The rise in AI-assisted vulnerability research necessitates faster patching and more sophisticated defense mechanisms. The Record Help Net Security SecurityWeek Infosecurity Magazine
Google's research indicates that AI is accelerating vulnerability discovery and increasing the likelihood of remote code execution flaws. This shift demands a proactive approach to cybersecurity, emphasizing rapid patching and enhanced threat detection capabilities. The increasing sophistication of vulnerability research, fueled by AI, presents a growing challenge for organizations worldwide. SecurityWeek
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading…
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an…
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access…
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the…
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and…
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Slider by 10Web slider-wd allows Blind SQL Injection.This issue affects Slider by 10Web: from n/a through 1.2.63.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AF themes WP Post Author wp-post-author allows Blind SQL Injection.This issue affects WP Post Author: from n/a through 4.0.0.
MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData() that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900,…
GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote…
GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $(command) selected via…
patool before 4.0.6 contains an OS command injection vulnerability on Windows because shell_quote_nt fails to escape cmd.exe metacharacters or embedded double quotes in archive filenames. Attackers can supply crafted filenames like report&calc.gz for single-file formats run with…
Rundeck before 6.2.0 contains an OS command injection vulnerability that allows authenticated users with job run permission to execute commands on Windows nodes by supplying crafted option values. Attackers can inject cmd.exe metacharacters such as && or | into free-text…
