A critical vulnerability in fast-mcp-telegram can let a remote attacker bypass bearer-token authentication and access a default Telegram account session without knowing the correct token.…
A persistent Windows device identifier helped federal investigators connect an alleged Scattered Spider member to a 2025 intrusion at a luxury jewelry retailer, according to…
BeyondTrust has patched four vulnerabilities in its Remote Support and Privileged Remote Access products, including two critical authentication bypass flaws that could let attackers gain…
A long-standing Linux KVM vulnerability can let a malicious guest virtual machine corrupt host kernel memory, breaking one of the core security promises of virtualization.…
A hidden authentication backdoor in several Tenda router firmware builds can let attackers bypass normal login checks and gain full administrator access to the device’s…
Iran-linked threat actor Cavern Manticore has been using trusted IT administration tools and DLL sideloading to deploy a modular command-and-control framework called Cavern against Israeli…
A vulnerability in the OpenAI Codex desktop app for macOS could allow attackers to leak sensitive data by abusing indirect prompt injection and automatic Markdown…
Threat actors are abusing Microsoft Teams voice calls to impersonate corporate IT support and trick employees into installing remote access tools that lead to EtherRAT…
A phishing campaign is impersonating recruiters from major global brands to steal Google account credentials from professionals looking at job opportunities. The campaign uses personalized…
Microsoft is changing how Windows settings backup works in Windows 11 version 26H2. Starting with the update, the backup policy for Windows settings backup and…
February 10, 2026
1 comment 
