Business owners using supported versions of the Windows operating system are urged to immediately install the latest security updates from Microsoft to mitigate a critical set of vulnerabilities recently identified. These vulnerabilities, four in total, are concerning due to their wormable nature, enabling remote code execution via Remote Desktop Services…
The Texas Attorney General has initiated legal action against Meta, asserting that the company’s WhatsApp messaging platform, which boasts over 3 billion users, does not deliver the end-to-end encryption (E2EE) it has consistently advertised. This controversy centers around the definition of E2EE, which is designed to ensure that messages are…
Vercel has disclosed that it recently identified additional customer accounts that were compromised in a significant security incident that resulted in unauthorized access to its internal systems. This revelation follows an extensive investigation which broadened to include various compromise indicators, along with an analysis of network requests and logs detailing…
Across the globe, over one billion Bluetooth-enabled devices—including smartphones, laptops, smart IoT devices, and industrial equipment—are exposed to a significant vulnerability that could enable attackers to monitor data exchanged between paired devices. This flaw, known by its designation CVE-2019-9506, stems from weaknesses in the encryption key negotiation protocol used by…
European law enforcement authorities have reported a significant breakthrough in cybersecurity operations, successfully infiltrating and dismantling a virtual private network (VPN) service known as First VPN, which was allegedly utilized for ransomware attacks and various criminal activities. This decisive action involved the identification of thousands of users linked to the…
Title: Anthropic’s Project Glasswing: A Game Changer in Vulnerability Discovery Last week, Anthropic unveiled Project Glasswing, an advanced AI model designed for identifying software vulnerabilities with unprecedented effectiveness. In response to its powerful capabilities, the company has made the unusual decision to delay the public release of the model, providing…
LibreOffice Urges Users to Update Following Newly Discovered Vulnerabilities LibreOffice, a widely used open-source office suite, has released an urgent update to its software, versions 6.2.6 and 6.3.0, in response to a series of critical vulnerabilities. The patches address three newly discovered security flaws that could potentially enable attackers to…
In a significant incident reported by cybersecurity experts at SafeDep, a large-scale automated attack targeted the GitHub software platform, affecting 5,561 repositories. Dubbed “Megalodon,” this campaign was able to push 5,718 fraudulent code updates within a rapid six-hour timeframe on May 18, 2026. SafeDep identified this threat through its digital…
A severe security vulnerability has emerged in LMDeploy, an open-source toolkit designed for compressing, deploying, and serving large language models (LLMs). This flaw, tracked as CVE-2026-33626 with a CVSS score of 7.5, is a Server-Side Request Forgery (SSRF) vulnerability that has been actively exploited less than 13 hours after its…