Attackers successfully compromised 42 third-party GitHub repositories by embedding malicious payloads too large to be detected by standard GitHub search and API paths. The sophisticated campaign targets AI coding assistants and IDEs, activating malware when
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities, impacting Adobe Commerce, Magento, and Google's Brotli decoder library, to its Known Exploited Vulnerabilities catalog, confirming active exploitation.
The critical Oracle PeopleSoft zero-day vulnerability, actively exploited by the ShinyHunters cybercrime group since May, has been identified as three chained flaws, researchers confirmed this week. Oracle patched all three under CVE-2026-35273 in June.
Tailscale has issued a patch for its built-in SSH server, addressing critical vulnerabilities that could enable attackers to gain root-level access on other connected servers within a network. Users are urged to update to version
Japan's GMO Internet Group has launched a reward programme offering up to $1 million for tips leading to the arrest of cybercriminals behind a breach of its Onamae.com Desktop Cloud service, which hosts Windows desktops
