Browsing: attackers

Threat actors are exploiting a critical-severity Windows Netlogon vulnerability for remote code execution, Centre for Cybersecurity Belgium (CCB) warns. Tracked…

Attackers use AI to increase velocity, scale and sophistication. Just as AI is improving, so will attackers’ use of it.…

Researchers at Novee Security have disclosed a high-severity vulnerability in Pretalx, an open source platform that powers the call-for-papers (CFP)…

Gambit Security links March 2026 breach of Los Angeles transit system to Iranian state‑sponsored actors, not hacktivists, citing forensic evidence…

Threat actors are exploiting a vulnerability in shared content delivery network (CDN) infrastructure to hide connections to malicious domains. Dubbed…

On May 19, 633 malicious npm package versions passed Sigstore provenance verification. They were cleared by the system because the…

A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary code on the…

CISA is warning that a newly-disclosed Linux kernel bug dubbed “CopyFail” is already being exploited, just days after researchers dropped…

During Operation Lunar Peek in November 2024, attackers gained unauthenticated remote admin access — and eventual root — across more…

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets…