Follow on Google News
CVE-2026-42533: NGINX Regex Map Flaw Can Crash Workers and May Allow RCE
NGINX has patched CVE-2026-42533, a configuration-dependent vulnerability that can let an unauthenticated attacker crash worker processes and potentially execute code remotely. The underlying defect has…
North Korean Campaign Hides OTTERCOOKIE Malware Code in SVG Flag Images
North Korean-linked attackers are hiding OTTERCOOKIE-aligned malware inside SVG country-flag files distributed through fake developer coding tests. The malicious code executes when a target starts…
U.S. Unseals Charges Against Russian Trio Over $62 Million Cybercrime Operation
U.S. prosecutors have unsealed an indictment charging three Russian nationals and two companies with operating bulletproof hosting infrastructure that allegedly supported ransomware, malware, phishing and…
GoldenEyeDog Subgroup Linked to DigiCert Code-Signing Certificate Attack
Security company Expel has linked the April 2026 DigiCert intrusion to CylindricalCanine, a subgroup it associates with the Chinese cybercrime operation GoldenEyeDog. The attackers compromised…
Hackers Claim 176 Million Starbucks Records Are for Sale
A threat actor using the name “anes2010” claims to be selling a database containing 176 million Starbucks user records. The alleged database appeared on a…
Public PoC Released for Critical ServiceNow Sandbox RCE Vulnerability
Security researchers have published technical exploit details for CVE-2026-6875, a critical ServiceNow AI Platform vulnerability that can allow unauthenticated remote code execution. ServiceNow has already…
wp2shell WordPress RCE Exploited After Emergency Patch
Attackers have started targeting two recently patched WordPress Core vulnerabilities that can be chained to execute code without authentication. Public proof-of-concept exploits appeared shortly after…
Citrix Windows Client Flaw Lets Local Users Gain SYSTEM Access
Citrix has patched two Windows client vulnerabilities, including a high-severity privilege escalation flaw that can let a low-privileged local user gain SYSTEM access. The more…
New Spirals Ransomware Encrypts IT Firm in Under 24 Hours
A previously unknown ransomware operation compromised a South Asian IT services company and began deploying its encryptor across the network less than 24 hours after…
Hugging Face Says Autonomous AI Agents Drove Infrastructure Breach
Hugging Face has disclosed a production infrastructure breach that it says was carried out from beginning to end by an autonomous AI agent system. The…
February 10, 2026
1 comment 
