A large study of 281 free Android VPN apps found widespread security and privacy weaknesses, including unencrypted communications, traffic leaks, advertising tracking, and unsafe VPN…
Security researchers have disclosed a Dell BIOS vulnerability that can expose administrator and user passwords stored in a computer’s SPI flash memory. The flaw, tracked…
CISA has published an after-action review of a security incident involving agency credentials and internal code exposed through a contractor’s personal GitHub account. The public…
Security researchers have uncovered Forg365, a phishing-as-a-service platform designed to compromise Microsoft 365 accounts and maintain access after the initial attack. The service combines device-code…
Security researchers have demonstrated a software supply chain attack called Ghostcommit that hides prompt-injection instructions inside PNG images. The technique can bypass AI code reviewers…
Microsoft has confirmed a Teams screen sharing issue that can cause blank or black screens on Macs during meetings. Affected users may also see screen…
Apple has sued OpenAI and two former employees, accusing them of taking confidential hardware information to support OpenAI’s expansion into consumer devices. The lawsuit was…
KittySploit is an open-source penetration testing framework that combines AI-assisted attack planning, web traffic analysis, exploitation modules, payload tooling, and post-exploitation features in one platform.…
Xalgorix is an open-source, self-hosted penetration testing platform that uses an AI agent to discover vulnerabilities and a separate verification process to test whether each…
Odyssey Stealer is targeting macOS users through fake software downloads, deceptive update messages and ClickFix-style instructions that convince victims to run malicious commands. Moonlock Lab…
February 10, 2026
1 comment 
