MalwareDiscover how 19 malicious modules in Chrome and Edge extensions steal crypto, seed phrases, and sessions. Learn immediate steps to secure your accounts.
Data Breaches86GB of customer data stolen from Manchester Airports Group via API credentials exposed in client-side JavaScript. A detailed look at the breach and its risks.
MalwareAnthropic warns Claude users of infostealer malware stealing sessions, bypassing passwords and 2FA. Discover attack methods and protection tips.
VulnerabilitiesActive exploitation of two PaperCut vulnerabilities allows pre-authentication RCE in MF and NG products. Patch immediately to secure systems.
RansomwareOn August 26, the ransomware group Qilin added the Bureau of Alcohol, Tobacco, Firearms and Explosives ATF to its leak site. In the following days, the
VulnerabilitiesCVE-2026-65643 is a critical flaw in cPanel/WHM allowing privilege escalation to root. Immediate updates are required to prevent server compromise.
VulnerabilitiesCVE-2026-82222: Critical GiveWP plugin flaw enables remote command execution on WordPress sites. Update to version 4.16.7.2 to fix.
Data BreachesShinyHunters claims to have stolen 284 million healthcare records from McKesson via vishing, leading to a disclosed breach and $55M ransom demand.
VulnerabilitiesCritical RCE flaw CVE-2026-60004 in Gitea enables remote code execution. 8,300+ servers exposed. Patch to version 1.27.1 now.