Title: Anthropic’s Project Glasswing: A Game Changer in Vulnerability Discovery Last week, Anthropic unveiled Project Glasswing, an advanced AI model designed for identifying software vulnerabilities with unprecedented effectiveness. In response to its powerful capabilities, the company has made the unusual decision to delay the public release of the model, providing…
LibreOffice Urges Users to Update Following Newly Discovered Vulnerabilities LibreOffice, a widely used open-source office suite, has released an urgent update to its software, versions 6.2.6 and 6.3.0, in response to a series of critical vulnerabilities. The patches address three newly discovered security flaws that could potentially enable attackers to…
In a significant incident reported by cybersecurity experts at SafeDep, a large-scale automated attack targeted the GitHub software platform, affecting 5,561 repositories. Dubbed “Megalodon,” this campaign was able to push 5,718 fraudulent code updates within a rapid six-hour timeframe on May 18, 2026. SafeDep identified this threat through its digital…
A severe security vulnerability has emerged in LMDeploy, an open-source toolkit designed for compressing, deploying, and serving large language models (LLMs). This flaw, tracked as CVE-2026-33626 with a CVSS score of 7.5, is a Server-Side Request Forgery (SSRF) vulnerability that has been actively exploited less than 13 hours after its…
Critical Backdoor Vulnerability Found in Webmin, Exposing Millions of Users to Risk A significant security breach has emerged in the popular open-source web-based system for Unix management, Webmin, following the disclosure of a critical zero-day vulnerability last week. The maintainers of Webmin have confirmed that the flaw was not a…
Cybersecurity Landscape Shaken by Surge in Software Supply Chain Attacks In a chilling development for the cybersecurity landscape, the frequency of software supply chain attacks has escalated dramatically, as evidenced by a recent breach involving GitHub. This incident underscores a troubling trend where malicious actors are increasingly compromising legitimate software…
In a significant breach, a pro-Ukrainian hacktivist group known as PhantomCore has been linked to a series of cyberattacks targeting TrueConf video conferencing servers in Russia since September 2025. This revelation stems from a detailed report released by Positive Technologies, highlighting that PhantomCore exploited a chain of three specific vulnerabilities…
In response to mounting concerns over data misuse and the discovery of malicious applications on its platform, Google has announced an expansion of its bug bounty program. This initiative is aimed at enhancing the security of Android applications and Chrome extensions distributed through the Google ecosystem. Two significant announcements were…
Checkmarx, an Israeli security firm, has reported a significant data breach associated with a supply chain vulnerability that exposed sensitive information on the dark web. The investigation traced this unauthorized access back to a cyberattack on March 23, 2026, which compromised the company’s GitHub repository. According to Checkmarx, preliminary findings…