A critical vulnerability in Tencent’s Sogou Input Method is being actively exploited by Chinese-linked hackers to deploy the GrayRabbit backdoor on Windows systems.
Microsoft has announced a massive security update for September 2026, addressing a record 972 vulnerabilities. The surge reflects the growing impact of AI-powered vulnerability discovery.
CISA has warned that hackers are actively exploiting a maximum-severity GitLab vulnerability that allows unauthenticated attackers to steal credentials and secrets.
Threat actors are actively exploiting a critical path traversal vulnerability in GitLab, allowing unauthenticated users to access arbitrary files on affected servers.
Threat actors are chaining three high-severity JFrog Artifactory vulnerabilities to escalate privileges and deploy malicious plugins for continuous access.
