Technology ❯ Software

Vulnerabilities

CVE Zero-Day Exploits Exploitation Exploits Security Flaws Remote Code Execution Kernel Vulnerabilities CVE Identifiers Exploitation Techniques Security Updates

North Korean Hackers Build Local AI Toolchains to Automate Cyberattacks

Researchers say on‑site LLMs with retrieval‑augmented search will allow state-linked groups to scale attacks, processing stolen files offline.

Zeus Wallet Takes Infrastructure Offline After Cybersecurity Incident

Unit 42 Reveals Three Post‑Compromise ‘Pass‑ta‑key’ Attacks Targeting Google Passkeys

DeepSeek Inside Hermes Used to Launch Autonomous Cyberattacks

Laundry Bear Uses OWA XSS to Install OWAReaper Backdoor

U.S. and Allies Attribute Long‑Running Zimbra Email Theft to Russian APT Laundry Bear

Ukraine's CERT Says UAC-0099 Hid Malware in Fake Notepad++ Plugin

TrustedVolumes Attacker Returns 1,122 ETH and Keeps Similar Amount as Bounty

Hide My Email Flaw Lets Attackers Unmask Users’ Real Addresses

Google Publishes June Android Security Bulletins With 122 Fixes and a 0‑Day

Torvalds Says Linux Security List Is ‘Almost Entirely Unmanageable’ as AI-Generated Bug Reports Flood In

Exaforce Raises $125 Million Series B for Real-Time AI Security Platform

US, UK Warn of ‘Firestarter’ Backdoor on Cisco Firewalls That Survives Patches

Microsoft Says Windows 11 Defender Is Enough for Most Users as April Zero‑Day Reports Temper Confidence

CISA Adds Eight Exploited Vulnerabilities to KEV and Sets Rapid Federal Patch Deadlines

Adobe Reader Zero-Day Exploited for Months Through Malicious PDFs

Android April Security Fixes Land as Samsung Rolls Out 47-Patch Galaxy Update

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

Magento ‘PolyShell’ Exploited at Scale as New WebRTC Skimmer Bypasses Site Defenses

LiteLLM Supply-Chain Attack Sees Backdoored PyPI Releases Pulled as Users Urged to Rotate Keys