News that matters, without the noise.

Malicious sites use JavaScript to build malware in browser memory

A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs browsers

ShinyHunters data leaks fuel $2,000 sextortion email scam

Threat actors are using email addresses exposed in data breaches leaked by the ShinyHunters extortion group to send

Ryoko PRO review | A Wi-Fi hotspot that gives you internet anywhere?

Realistic enough, or still uncanny valley?

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba’s JSON library for

CVE-2026-66374

High Severity Description Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the

CVE-2026-66373

High Severity Description Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows

CVE-2026-66339

Medium Severity Description A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP

OpenAI confirms ChatGPT is down worldwide

ChatGPT, the famous artificial intelligence chatbot that allows users to converse with various personalities and topics, has connectivity issues

Rockwell Patches Code Execution Flaws in Arena Simulation Software

A researcher has explained how an attacker could exploit these vulnerabilities to target industrial organizations. The post Rockwell

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Security researcher Yuhang Wu at depthfirst has published a working proof-of-concept (PoC) exploit that executes commands as git

Person found a Flock camera hidden inside a standard roadside speed radar sign