Vulnerability
React2Shell Vulnerability Exploited In the Wild Prompts CISA Warning
A critical security vulnerability dubbed React2Shell, affecting React Server Components, is now under active attack, prompting the U.S. Cyb…
Latest
Cybersecurity News · Page 2
Breaking threats, breaches and vulnerabilities — explained.
AI Security
AI Coding Assistants Riddled with Security Holes, Researchers Warn
Popular AI-powered coding tools are exposing developers to serious risks, a new study reveals. Researchers have discovered over 30 vulnerab…
Vulnerability
React2Shell Under Attack Chinese Hackers Pounce on New Vulnerability
Chinese state-sponsored hacking groups are already actively exploiting the recently revealed React2Shell vulnerability, targeting React Ser…
Application Security
Apache Tika Faces Critical Code Injection Threat Patch Now
A severe vulnerability in Apache Tika is leaving systems exposed to remote code execution via XML external entity (XXE) injection. Security…
Email Security
Email-Triggered Attack Can Nuke Google Drive Via New Agentic Browser Flaw
Researchers at Straiker STAR Labs have uncovered a serious vulnerability in Perplexity's Comet browser that allows attackers to weaponize o…
DDoS Attacks
Massive DDoS Attack Reaches Record-Breaking 29.7 Tbps AISURU Botnet Suspected
A distributed denial-of-service (DDoS) attack of unprecedented scale slammed targets this week, peaking at a staggering 29.7 terabits per s…
Cybercrime
GoldFactory Banking Trojan Spreads Across Southeast Asia Infecting Thousands
A surge in mobile malware is hitting Indonesia, Thailand, and Vietnam as the GoldFactory cybercrime group pushes out fake government apps l…
Vulnerability
React and Next.js Patches Needed to Fix Remote Code Execution Risk
Developers using React Server Components in React and Next.js should update their applications immediately. A newly discovered, critical vu…
AI Security
Critical Vulnerability in Red Hat OpenShift AI Puts Hybrid Clouds at Risk
A serious security vulnerability has been discovered in Red Hat's OpenShift AI platform, potentially allowing malicious actors to gain elev…
Vulnerability
OneLogin API Vulnerability Allowed Secret Theft, App Impersonation
A critical flaw in the One Identity OneLogin platform could have allowed attackers to pilfer sensitive OpenID Connect client secrets. Exper…
Encryption
Intel SGX Under Threat New Attack Steals Encryption Keys Via Memory Sniffing
Researchers have uncovered a new vulnerability that allows attackers to silently extract encryption keys from Intel's Software Guard Extens…
Malware
XCSSET Malware Evolves Targeting Firefox on macOS
A stealthier version of the XCSSET malware, notorious for targeting macOS systems, has emerged with the ability to hijack clipboard data an…