In a significant incident reported by cybersecurity experts at SafeDep, a large-scale automated attack targeted the GitHub software platform, affecting 5,561 repositories. Dubbed “Megalodon,” this campaign was able to push 5,718 fraudulent code updates within a rapid six-hour timeframe on May 18, 2026. SafeDep identified this threat through its digital…
A severe security vulnerability has emerged in LMDeploy, an open-source toolkit designed for compressing, deploying, and serving large language models (LLMs). This flaw, tracked as CVE-2026-33626 with a CVSS score of 7.5, is a Server-Side Request Forgery (SSRF) vulnerability that has been actively exploited less than 13 hours after its…
Critical Backdoor Vulnerability Found in Webmin, Exposing Millions of Users to Risk A significant security breach has emerged in the popular open-source web-based system for Unix management, Webmin, following the disclosure of a critical zero-day vulnerability last week. The maintainers of Webmin have confirmed that the flaw was not a…
Cybersecurity Landscape Shaken by Surge in Software Supply Chain Attacks In a chilling development for the cybersecurity landscape, the frequency of software supply chain attacks has escalated dramatically, as evidenced by a recent breach involving GitHub. This incident underscores a troubling trend where malicious actors are increasingly compromising legitimate software…
In a significant breach, a pro-Ukrainian hacktivist group known as PhantomCore has been linked to a series of cyberattacks targeting TrueConf video conferencing servers in Russia since September 2025. This revelation stems from a detailed report released by Positive Technologies, highlighting that PhantomCore exploited a chain of three specific vulnerabilities…
In response to mounting concerns over data misuse and the discovery of malicious applications on its platform, Google has announced an expansion of its bug bounty program. This initiative is aimed at enhancing the security of Android applications and Chrome extensions distributed through the Google ecosystem. Two significant announcements were…
Checkmarx, an Israeli security firm, has reported a significant data breach associated with a supply chain vulnerability that exposed sensitive information on the dark web. The investigation traced this unauthorized access back to a cyberattack on March 23, 2026, which compromised the company’s GitHub repository. According to Checkmarx, preliminary findings…
Apple users should remain vigilant regarding recent threats, as a new report from Google researchers reveals that iPhones can be compromised simply by visiting seemingly benign websites. This alarming discovery stems from a series of iPhone hacking exploits uncovered by Google’s Project Zero earlier this year. The researchers identified at…
The Federal Trade Commission (FTC) announced on Thursday that Cox Media Group (CMG), alongside two other marketing firms, MindSift LLC and 1010 Digital Works, will collectively pay nearly $1 million to resolve allegations of misleading practices. These companies purportedly deceived clients by claiming they could deliver targeted advertising based on…