CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.

Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents

WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage

Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root