BdThemes' compromised JSON feed exploits XSS in seven WordPress plugins, creating rogue admins and installing a PHP web shell without plugin updates.

A new Mirai-based modular Linux botnet malware called Evooo1Bot has been targeting internet-facing gateway devices, turning ...

Head Mare exploits two TrueConf flaws to gain SYSTEM privileges and replace client installers with PhantomCore malware across ...

BdThemes supply chain attack poisons JSON feed to create rogue WordPress admins and deploy web shells without code changes.

In fresh attacks, North Korean APT Lazarus has exploited CVE-2026-68820, a new Windows zero-day, to take over victims’ systems.

Vulnerabilities can lurk within production code for years or decades — and AI tools have opened a gateway to a glut of new long-hidden discoveries.

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create ...

Lazarus Group exploited Windows zero-day CVE-2026-68820 in afd.sys to breach defense and aerospace workers via fake LinkedIn job offers, deploying a FudModule rootkit that killed 94 ...

Fake sites were popping up at the top of search engine results pages and used to convince victims to download a trojanized ...

Spread the loveWhen you mention Integrated Development Environments (IDEs) for Python, a few names usually jump to mind: ...

Fake downloads of The Odyssey are spreading Lumma Stealer malware capable of stealing passwords, cookies, payment data, and ...

We suggest only testing the large files if you have a connection speed faster than 50 Mbps. Click the file you want to download to start the download process. If the download does not start, you may ...