MetaMask has revealed an ongoing security incident impacting some of its infrastructure, specifically non-custodial staking operations. The company assures users there is no immediate threat to individual MetaMask wallets.
Security researchers have published a public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics vulnerability that Apple confirmed was exploited in targeted attacks against iPhones and Macs. The flaw is triggered by a crafted PDF.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning regarding a pre-authentication remote code execution (RCE) vulnerability in MikroTik RouterOS. Tracked as CVE-2026-84411, the flaw allows unauthenticated attackers to gain root
Cisco has issued a critical warning regarding active exploitation of an authentication bypass vulnerability, CVE-2026-76504, in its Catalyst SD-WAN Manager. The flaw allows unauthenticated remote attackers to gain administrative control.
Russian state-sponsored threat group Star Blizzard has introduced a new phishing tactic, "RedFlick," abandoning its previous "ClickFix" method. The campaign targets Ukrainian-linked entities, including NGOs, think tanks, and journalists, with the goal of deploying the
