Stories are attributed to their original publishers and reviewed by an editor before they appear here. Always read the original source.
vulnerabilityvia The Hacker News
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has...
Oct 28, 2026 UTC
vulnerabilityvia SecurityWeek
The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches.
The post Chrome and Firefox Updates Patch Over 200 Vulnerabilities appeared first...
Oct 28, 2026 UTC
vulnerabilityvia The Hacker News
Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber.
The vulnerab...
Oct 28, 2026 UTC
vulnerabilityvia The Hacker News
A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operatin...
Oct 28, 2026 UTC
vulnerabilityvia CSO Online
AI developers may have a security setting enabled and still end up running attacker-controlled code. Pillar Security has disclosed a high-severity vulnerability in Unsloth’s model...
Oct 28, 2026 UTC
vulnerabilityvia Schneier on Security
Interesting research:
TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what...
Oct 26, 2026 UTC
vulnerabilityvia Schneier on Security
PHP maintainers have released fixes for two critical vulnerabilities:
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote...
Oct 22, 2026 UTC
vulnerabilityvia Schneier on Security
There’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS).
Really nice resource. It’s fun to reread my 2002 essay...
Oct 21, 2026 UTC
vulnerabilityvia Schneier on Security
Justin.sh is reporting on a confidential Cellebrite document that has been leaked to him:
Cellebrite calls it Advanced Unlocks (AU from here on), not to be confused with the “adva...
Oct 20, 2026 UTC
vulnerabilityvia SecurityWeek
The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization.
The post China-Linked Hackers Exploit PHP2Shell to Root F...
Oct 28, 2026 UTC
vulnerabilityvia WeLiveSecurity (ESET)
Like any other marketplace, the social commerce platform has its share of red flags. It pays to know what to look for so you can shop or sell without headaches.
Feb 19, 2026 UTC
vulnerabilityvia WeLiveSecurity (ESET)
The mobile marketplace app has a growing number of users, but not all of them are genuine. Watch out for these common scams.
Feb 4, 2026 UTC