Earlier in Cybersecurity
Security researchers from Forever Security have identified a critical vulnerability where a single browser extension can compromise the AI assistants integrated into multiple Chromium-based browsers. This exploit affects Gemini Live within Google Chrome, Perplexity Comet, Microsoft Edge, Opera Neon…
Mandiant reported on March 13, 2024, that an attacker successfully hijacked an active AI coding assistant session at an unnamed software-as-a-service (SaaS) provider. This compromise allowed the attacker to introduce malicious code, which was subsequently spread across approximately 100 internal…
A critical security vulnerability has been identified in Parallels Desktop for Mac, a popular virtualization software that enables users to run other operating systems, such as Windows, on their macOS devices.
The N0va phishkit has emerged as a significant threat, actively targeting organizations in both the United States and Europe. This sophisticated phishing operation focuses on impersonating well-known and trusted services, a tactic designed to lower victim suspicion and increase…
Google has announced the patching of a high-severity security vulnerability affecting the cellular modem in its Pixel smartphones. The flaw, identified as CVE-2026-58704, has a CVSS score of 8.0, indicating a significant risk.
The cybersecurity landscape is facing a critical challenge: the widening gap between the discovery of cyber threats and their subsequent exploitation. This disparity is being dramatically exacerbated by the integration of artificial intelligence (AI) into the methodologies employed by malicious…
Acronis has issued a security alert regarding a high-severity vulnerability within its Backup plugin designed for cPanel and Web Host Manager (WHM) environments. This flaw, identified as CVE-2026-87886, has a CVSS score of 7.8, classifying it as a significant security…
Threat actors are actively exploiting a critical security vulnerability within the WooCommerce Wholesale Lead Capture, a premium WordPress plugin utilized by over 6,000 active installations. This flaw allows unauthenticated attackers to upload arbitrary files, including PHP backdoors, thereby achieving remote…
WSO2 API Manager is currently facing active exploitation attempts targeting a critical security vulnerability that allows for the bypass of JSON Web Token (JWT) authentication, enabling attackers to forge administrative tokens and gain unauthorized access.
A sophisticated Brazilian banking malware operation, identified by Elastic Security Labs as REF9334 and employing a toolkit named KREMLIN, has been actively targeting users since at least May 2025. This threat actor utilizes deceptive tactics, impersonating over a dozen Brazilian…