Security News - ipban.one

Developer working at a computer screen representing GitHub internal repository breach

Data Breaches 2026-05-20 24 views

GitHub Confirms Breach of 3800 Internal Repos via Poisoned Extension

GitHub confirms TeamPCP exfiltrated 3800 internal repos via a poisoned VS Code extension. No customer data impact found yet as investigation continues.

Read more →

Computer screen displaying code representing Windows BitLocker security vulnerability

Vulnerabilities 2026-05-20 18 views

YellowKey BitLocker Zero-Day Bypass Exploits Windows Recovery

Microsoft issues emergency mitigation for YellowKey CVE-2026-45585, a BitLocker zero-day bypass requiring only a USB stick and physical access.

Read more →

Cybersecurity hacking visualization representing a supply chain attack on developer tools

Hacking 2026-05-20 18 views

Nx Console VS Code Extension Hijacked in Supply Chain Attack

Nx Console VS Code extension with 2.2M installs hijacked via stolen token. Credential stealer targeted developer secrets and AI assistant configs.

Read more →

Source code on a computer monitor representing a code repository breach

Data Breaches 2026-05-06 31 views

Trellix Confirms Source Code Breach After Repository Hack

Trellix discloses unauthorized access to its source code repository. No evidence of code exploitation found as forensic investigation continues.

Read more →

Terminal code on a dark screen representing Linux kernel vulnerability exploitation

Vulnerabilities 2026-05-06 29 views

Linux Kernel Copy Fail Flaw Enables Root in 732 Bytes

CVE-2026-31431 Copy Fail lets unprivileged users gain Linux root access with a 732-byte script. CISA mandates patching by May 15.

Read more →

Server room with rows of hosting infrastructure vulnerable to cyberattacks

Ransomware 2026-05-06 29 views

Critical cPanel Zero-Day Exploited in Sorry Ransomware Wave

CVE-2026-41940 in cPanel exploited as zero-day, deploying Sorry ransomware across 44,000+ servers. CISA mandates immediate patching.

Read more →

Globe with network connections representing international cyber espionage operations

Threat Intelligence 2026-05-06 30 views

China-Linked Hackers Target Asian Governments and NATO State

Chinese espionage operation SHADOW-EARTH-053 deploys ShadowPad across eight countries targeting governments, defense, and journalists.

Read more →

Network cables and server infrastructure representing web server vulnerabilities

Vulnerabilities 2026-05-06 21 views

Apache HTTP/2 Double-Free Flaw Enables Remote Code Execution

Apache patches CVE-2026-23918, a double-free flaw in mod_http2 enabling RCE with two HTTP/2 frames. Immediate upgrade to 2.4.67 urged.

Read more →

Source code displayed on a dark monitor screen representing leaked software code

Data Breaches 2026-04-01 45 views

Claude Code Source Code Leaked via NPM Source Map File

Anthropic accidentally leaked Claude Code source code via an npm source map file, exposing unreleased features and internal security mechanisms.

Read more →

Close-up of a computer screen displaying cybersecurity code and network monitoring data

Vulnerabilities 2026-02-10 52 views

BeyondTrust Critical Pre-Auth RCE Flaw Exposes Thousands of Instances

BeyondTrust discloses CVE-2026-1731, a critical 9.9 CVSS pre-auth RCE flaw affecting Remote Support and Privileged Remote Access with 11,000 exposed instances.

Read more →