News
Age Verification System Fooled By Fake Moustache In Online Safety Test
2+ day, 9+ hour ago (409+ words) The UK's Online Safety Act aimed to revolutionize digital child protection when it came into effect in July 2025. However, nearly a year later, a new report from Internet Matters reveals that surprisingly low-tech methods can defeat these advanced age verification…...
Hackers Use Morse Code Prompt Tricks to Steal $200 K From Grok and Bankrbot
2+ day, 8+ hour ago (659+ words) In a fascinating and alarming incident that highlights the emerging risks of artificial intelligence in the cryptocurrency space, a threat actor successfully manipulated two AI agents to steal approximately $200, 000 in digital assets. By utilizing a clever prompt injection technique disguised…...
PCPJack Worm Attacks Docker, Kubernetes, Redis, and Mongo DB
2+ day, 13+ hour ago (376+ words) A new password-stealing malware called PCPJack that is actively spreading through exposed cloud systems. The advanced toolset targets services like Docker, Kubernetes, Redis, Mongo DB, and vulnerable web applications. Once inside a network, PCPJack steals sensitive passwords and keys from…...
New Infostealer Campaign Abuses Git Hub Releases For Payload Hosting
2+ day, 13+ hour ago (397+ words) A new cybersecurity threat has emerged involving a targeted cyberespionage campaign that leverages trusted infrastructure to gain persistent access to victim systems. Cyble Research and Intelligence Labs (CRIL) discovered this operation, which utilizes social engineering tactics and hosts its malicious…...
Firefox Patches 423 Vulnerabilities, Adds Support for Claude Mythos and Other AI Models
2+ day, 13+ hour ago (382+ words) Mozilla recently disclosed the remediation of an unprecedented number of latent security flaws in Firefox. This massive cleanup marks a significant shift in how open-source projects handle threat discovery, moving from traditional fuzzing to automated, AI-driven pipelines. However, recent advancements…...
Dirty Frag Linux Vulnerability Lets Attackers Gain Root Privileges, Po C Released
2+ day, 13+ hour ago (606+ words) A newly discovered Linux kernel vulnerability class dubbed "Dirty Frag" has sent shockwaves through the security community after a proof-of-concept (Po C) exploit was made public ahead of schedule. The exploit enables universal local privilege escalation, allowing attackers to reliably gain…...
Multiple Critical Vulnerabilities Patched in Next. js and React Server Components
2+ day, 14+ hour ago (533+ words) Published through Git Hub advisories by core maintainer Tim Neutkens, the patches land in versions 15. 5. 16 and 16. 2. 5, covering affected branches spanning Next. js 13. x through 16. x. The breadth of these flaws is notable. Vulnerabilities touch App Router configurations, Pages Router legacy setups,…...
New Cisco Network Flaw Lets Remote Attackers Trigger Do S Attacks
3+ day, 6+ hour ago (548+ words) Cisco has issued a high-severity security advisory warning of a critical connection exhaustion vulnerability affecting two of its widely deployed network management platforms. Tracked as CVE-2026-20188 with a CVSS base score of 7. 5, the flaw directly impacts the Cisco Crosswork Network…...
Critical Watch Guard Agent Flaws Allow Attackers to Gain Full SYSTEM Privileges
3+ day, 9+ hour ago (485+ words) Multiple high-severity vulnerabilities discovered in the Watch Guard Agent for Windows could allow malicious actors to escalate their privileges to the highest system level or completely disrupt critical security services. With CVSS scores reaching up to 8. 5, these flaws pose a…...
Critical Redis Vulnerabilities Enable Remote Code Execution Attacks
3+ day, 10+ hour ago (582+ words) Redis has disclosed and patched five security vulnerabilities, four rated High severity, that could allow authenticated attackers to achieve remote code execution (RCE) on affected servers. Organizations running self-managed Redis deployments are strongly urged to upgrade immediately, as exploitation could…...