NGINX has patched CVE-2026-42533, a configuration-dependent vulnerability that can let an unauthenticated attacker crash worker processes and potentially execute code remotely. The underlying defect has…
North Korean-linked attackers are hiding OTTERCOOKIE-aligned malware inside SVG country-flag files distributed through fake developer coding tests. The malicious code executes when a target starts…
U.S. prosecutors have unsealed an indictment charging three Russian nationals and two companies with operating bulletproof hosting infrastructure that allegedly supported ransomware, malware, phishing and…
Security company Expel has linked the April 2026 DigiCert intrusion to CylindricalCanine, a subgroup it associates with the Chinese cybercrime operation GoldenEyeDog. The attackers compromised…
A threat actor using the name “anes2010” claims to be selling a database containing 176 million Starbucks user records. The alleged database appeared on a…
Security researchers have published technical exploit details for CVE-2026-6875, a critical ServiceNow AI Platform vulnerability that can allow unauthenticated remote code execution. ServiceNow has already…
Attackers have started targeting two recently patched WordPress Core vulnerabilities that can be chained to execute code without authentication. Public proof-of-concept exploits appeared shortly after…
Citrix has patched two Windows client vulnerabilities, including a high-severity privilege escalation flaw that can let a low-privileged local user gain SYSTEM access. The more…
A previously unknown ransomware operation compromised a South Asian IT services company and began deploying its encryptor across the network less than 24 hours after…
Hugging Face has disclosed a production infrastructure breach that it says was carried out from beginning to end by an autonomous AI agent system. The…
February 10, 2026
1 comment 
