Pass-ta-key: The Three Attacks Undermining Passkey Synchronization on Google Password Manager
Learn about the Pass-ta-key attacks exposing Google Password Manager flaws, allowing malware to steal synchronized passkeys and bypass verification.
Vulnerabilities
More news
Page 35 / 38 · 342 articles
N‑able N‑central Under Attack: CVE‑2026‑18577 Exploited to Bypass Prior Patch
Attackers exploit N-able N-central CVE-2026-18577 to bypass authentication. Discover how to patch servers and hunt for malicious CloudFlare tunnels.
Double Authentication Bypass in N-central: Active Attacks Using Cloudflare Tunnels
Learn about the N-central double authentication bypass via Cloudflare tunnels. Details on recent CVEs, active attacks, and steps for quick remediation.
New SBOM Requirements: CISA Mandates Digital Signature and Unlimited Dependency Coverage
CISA's updated SBOM guidance mandates digital signatures, includes ten new fields, and requires full coverage of all transitive dependencies without limits.
Over 1,800 patches in seven months: Google’s AI transforms Chrome security and finds a 13-year-old vulnerability
Google's Gemini-based AI fixed over 1,800 Chrome vulnerabilities in seven months, discovering a 13-year-old sandbox escape flaw and automating patches.
84 Vulnerabilities in 4G and 5G Core: Implicit Trust Between Signaling Functions Betrays Networks
Researchers uncovered 84 vulnerabilities in 4G and 5G core networks caused by implicit trust between signaling, enabling DoS and session hijacking.
Coldcard’s Hidden Bug Since March 2021: $70 Million in Bitcoin Vanish in 41 Minutes
$70M Bitcoin stolen due to a Coldcard hardware wallet firmware bug from March 2021. Learn about the flaw, affected devices, and required security actions.
CVE-2026-66066: Critical Ruby on Rails Vulnerability Exposes Secrets and Credentials
A critical Ruby on Rails Active Storage flaw, CVE-2026-66066, allows unauthenticated users to read files and steal secrets. Learn how to patch it.
Adobe patches critical vulnerability in Campaign Classic (CVSS 10.0) and eight in Bridge
Adobe patched a critical CVSS 10.0 RCE flaw in Campaign Classic and eight critical vulnerabilities in Adobe Bridge. Update immediately.