SourTrade Malvertising Builds Malware Inside Web Browsers
SourTrade malvertising makes browsers assemble unique Windows malware in memory, targeting traders and crypto investors across 12 countries worldwide.
Read more →Latest cybersecurity news, vulnerabilities, and threat intelligence
SourTrade malvertising makes browsers assemble unique Windows malware in memory, targeting traders and crypto investors across 12 countries worldwide.
Read more →
Clop-linked attackers exploit CVE-2026-12569 in PTC Windchill and FlexPLM to steal product data, deploy web shells, and launch extortion campaigns worldwide.
Read more →
Tata Electronics confirmed a cyber incident as World Leaks claimed to publish 630GB of Apple, Tesla and supplier data, including iPhone 18 Pro files online.
Read more →
CVE-2026-6875, a critical ServiceNow AI Platform sandbox escape, is reportedly being exploited as administrators are urged to apply available patches.
Read more →
GitHub confirms TeamPCP exfiltrated 3800 internal repos via a poisoned VS Code extension. No customer data impact found yet as investigation continues.
Read more →
Microsoft issues emergency mitigation for YellowKey CVE-2026-45585, a BitLocker zero-day bypass requiring only a USB stick and physical access.
Read more →
Nx Console VS Code extension with 2.2M installs hijacked via stolen token. Credential stealer targeted developer secrets and AI assistant configs.
Read more →
Trellix discloses unauthorized access to its source code repository. No evidence of code exploitation found as forensic investigation continues.
Read more →
CVE-2026-31431 Copy Fail lets unprivileged users gain Linux root access with a 732-byte script. CISA mandates patching by May 15.
Read more →
CVE-2026-41940 in cPanel exploited as zero-day, deploying Sorry ransomware across 44,000+ servers. CISA mandates immediate patching.
Read more →