Vulnerability

AI-Generated Malware Exploits "React2Shell" in Low-Skill Cyberattack Campaign Darktrace’s CloudyPots honeypot network recently uncovered an active malware…

300 Million Private AI Chat Messages Exposed in Major Firebase Misconfiguration A critical security lapse in the popular AI chat…

Critical DoS Vulnerability in Axios HTTP Library Exposes Node.js Servers to Crashes A high-severity security flaw (CVE-2026-25639) has been…

Critical Zero-Click RCE Flaw in Claude Desktop Extensions Exposes 10,000+ Users A newly disclosed zero-click remote code execution (RCE)…

Thousands of OpenClaw AI Assistants Exposed Online, Raising Security Risks SecurityScorecard has identified 40,214 publicly exposed instances of OpenClaw,…

Roundcube Patches Critical Privacy Bypass Vulnerability in Webmail Software Roundcube, a widely used open-source webmail platform, has released urgent security…

Nitrogen Ransomware Bug Destroys Encryption Keys, Leaving Victims and Attackers Empty-Handed A coding error in a ransomware variant linked to…

Stored XSS Vulnerability in n8n Automation Platform Exposes Credentials to Attackers Researchers at Imperva have identified a stored cross-site scripting…

Tesla’s Remote Hacking History Contradicts Executive Testimony During a Senate Commerce Committee hearing on autonomous vehicles this week, Tesla…

Critical SQL Injection Flaw in Fortinet FortiClient EMS Exposes Organizations to Remote Attacks A severe security vulnerability in Fortinet’s…

CISA Warns of Actively Exploited React Native CLI Vulnerability (CVE-2025-11953) The Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2025-11953,…

CentOS 9 Linux Kernel Vulnerability Enables Local Privilege Escalation to Root A critical use-after-free (UAF) vulnerability in the Linux kernel’…