News that matters, without the noise.

WhatsApp Discloses File Spoofing, Arbitrary URL Scheme Vulnerabilities

The vulnerabilities were reported to Meta through its bug bounty program and were patched with updates released earlier

CloudZ malware abuses Microsoft Phone Link to steal SMS and OTPs

A new version of the CloudZ remote access tool (RAT) is deploying a previously unseen malicious plugin called

ScarCruft hackers push BirdCall Android malware via game platform

The North Korean hacker group APT37 has been delivering an Android version of a backdoor called BirdCall in

ScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and Windows

The North Korea-aligned state-sponsored hacking group known as ScarCruft has compromised a video game platform in a supply

Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries

Microsoft has disclosed details of a large-scale credential theft campaign that has leveraged a combination of code of

RHSA-2026:13631: Important: Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 update is now available (RHBQ 3.27.3.SP1)

An update for Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 update is now available (RHBQ

Beware of Fake ‘Notepad++ for Mac’ Website, Possibly Could Harm your Machine

A fake website claiming to offer an official macOS version of the popular text editor Notepad++ has been

Now I actually have to use my own brain? The audacity…

pnpm 11 Turns On Minimum Release Age by Default to Reduce npm Supply Chain Risk

The npm ecosystem has long been a target for supply chain attacks, where threat actors exploit the open

6 Reasons You Can’t Investigate Alerts (And How to Fix It)

CVE-2026-6704

Medium Severity Description The Blog Settings plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’

CVE-2026-6702

Medium Severity Description The Publish 2 Ping.fm plugin for WordPress is vulnerable to Cross-Site Request Forgery in all