F5 has released security updates for three NGINX memory-safety vulnerabilities that can expose affected servers to denial-of-service attacks, limited memory disclosure or memory modification. The…
A newly documented Windows backdoor called Stupig can open a command shell with SYSTEM privileges when an attacker enters a special username at the sign-in…
CISA has ordered federal agencies to address a critical Oracle E-Business Suite vulnerability that attackers are actively exploiting. The flaw, tracked as CVE-2026-46817, allows an…
Splunk has released security updates for three vulnerabilities affecting Splunk Enterprise and Splunk Cloud Platform. The flaws could allow attackers to run unauthorized searches, write…
Zoom has patched a critical vulnerability that could allow an unauthenticated attacker to take over accounts through vulnerable Windows clients. The security issue, tracked as…
Security researchers have uncovered TuxBot v3 Evolution, a previously undocumented IoT botnet framework built with help from a large language model. The malware targets exposed…
A phishing-as-a-service platform called Kratos is targeting Microsoft 365 users across the United States, Europe and other regions. The operation uses fake document alerts, invoices…
OpenAI has developed GPT-Red, an internal automated red-teaming model that searches for prompt injection vulnerabilities at scale. According to the company’s GPT-Red announcement, the system…
Specter is a new Flipper Zero application that detects active 13.56 MHz NFC reader fields without transmitting its own carrier. The tool can help users…
JetBrains has released security updates for six vulnerabilities affecting IntelliJ IDEA, TeamCity and YouTrack. The flaws include a critical IntelliJ IDEA path traversal issue, four…
February 10, 2026
1 comment 
