News that matters, without the noise.

India says allegedly leaked nuclear plant files pose no safety risk

Documents that the World Leaks cybercrime group claimed to leak from the Kudankulam Nuclear Power Plant do not

WordPress security advisory (AV26-723)

<article data-history-node-id="8011" about="/en/alerts-advisories/wordpress-security-advisory-av26-723" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder

Attackers Combo Up Evasion Tactics for BEC Phishing

“The TFF Trap” uses fileless techniques and loaders with low detection rates to deploy various RATs and stealers,

Vibe Coding Needs a Reality Check

Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign

A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files

RHSA-2026:42098: Moderate: Red Hat JBoss Enterprise Application Platform 8.1.7 XP 6.0.5.GA release

JBoss EAP XP 6.0.5.GA release on the EAP 8.1 base. See references for release notes.

Hackers Are Turning Microsoft 365 Calendar Invites Into Secret Malware Command Channels

A stealthy new malware strain called HOLLOWGRAPH that hijacks Microsoft 365 calendars to secretly communicate with hackers, disguising

New HollowGraph malware uses Microsoft Graph for stealthy C2 comms

A malicious component dubbed HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a command-and-control channel

More than 1,000 domains illegally streaming World Cup games seized, DOJ says

Over the course of the World Cup tournament, the Department of Justice seized more than 1,000 domains for

USN-8570-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the

HPE security advisory (AV26-722)

<article data-history-node-id="8010" about="/en/alerts-advisories/hpe-security-advisory-av26-722" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder

USN-8567-1: Linux kernel vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit