LoongLeak vulnerability in Loongson 3A5000 and 3A6000 CPUs lets any unprivileged program read disk encryption keys and root ...

Security experts say prioritization should be the main focus for the August updates, not the massive CVE volume.

Critical zero-click Zoom flaw let attackers hijack every device in a meeting via one annotation. AI found it in one day.

A new week starts with another Google Chrome security alert that has been issued by the security agency of the Indian government. The risk alert comes with a warning for millions of Chrome users in ...

Patch Tuesday August 2026 closed a Windows kernel zero-day (CVE-2026-68820) that North Korea's Lazarus Group had been ...

A weekly look at exploited flaws, exposed systems, supply-chain attacks, browser abuse, malware campaigns, and the security risks that mattered most.

Hackers have already begun using a proof-of-concept (PoC) exploit for a critical Microsoft SharePoint vulnerability, published by cybersecurity company Rapid7 on Tuesday.

A new Mirai-based modular Linux botnet malware called Evooo1Bot has been targeting internet-facing gateway devices, turning ...

A single AI-assisted researcher discovered the massive blast-radius vulnerabilities using fewer than 20 prompts on publicly available models in less than 24 hours.

Microsoft’s August Patch Tuesday fixes about 400 security flaws, including an actively exploited Windows zero-day and multiple 9.8-rated RCE bugs.

Microsoft patches 398 flaws, including exploited CVE-2026-68820 that lets local attackers reach SYSTEM, plus four unauthenticated 9.8 RCEs.

Security researchers at Searchlight Cyber have used OpenAI’s GPT5.6 Sol Ultra to successfully develop a full exploit chain for two critical WordPress Core vulnerabilities. The first vulnerability, ...