News that matters, without the noise.

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

A malvertising operation dubbed SourTrade is making victims’ browsers build the final Windows executable themselves, using a legitimate

GitLab Vulnerabilities Allow Attackers to Execute Remote Code on Default GitLab Installations

A newly disclosed exploit chain in GitLab shows how two long-buried memory-safety flaws in a Ruby JSON parsing

Researcher Claims Working Jailbreak on Top AI Models Including GPT-5.6, Claude Opus 5, and Fable

A well-known AI red teamer claims to have developed a universal jailbreak that works against leading large language

10 Best ZTNA Solutions (Zero Trust Network Access) In 2026

Zero Trust Network Access (ZTNA) anchors 2026 cybersecurity amid remote, cloud, and hybrid booms. ZTNA solutions aren’t hype—they’re

Malicious sites use JavaScript to build malware in browser memory

A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs browsers

ShinyHunters data leaks fuel $2,000 sextortion email scam

Threat actors are using email addresses exposed in data breaches leaked by the ShinyHunters extortion group to send

Ryoko PRO review | A Wi-Fi hotspot that gives you internet anywhere?

Realistic enough, or still uncanny valley?

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba’s JSON library for

CVE-2026-66374

High Severity Description Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the

CVE-2026-66373

High Severity Description Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows

CVE-2026-66339

Medium Severity Description A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP