The Rise of a New Threat Six iOS vulnerabilities accidentally leaked on GitHub rapidly evolved into a formidable weapon. Now, at least seven independent threat groups actively utilize this exploit. This threat involves the...
Public exploits often transform an already patched vulnerability into a tangible threat for those who delay updates, and this exact peril now looms over administrators of vBulletin forums. On July 27, security researchers at...
A single day of delayed patching could transform a corporate security gateway into a highly convenient ingress point for malicious actors. Shadowserver experts recently reported massive exploitation attempts targeting a critical Ivanti Sentry vulnerability....
A novel method to acquire total systemic hegemony over Windows has surfaced, and remarkably, it eschews complex kernel vulnerabilities in favor of exploiting the erratic behavior of the integrated antivirus suite. A researcher operating...
A vulnerability has been unearthed within the widespread EspoCRM customer management architecture, a profound frailty that transmutes administrative access into absolute, sovereign dominion over the host server. A mere half-dozen petitions are sufficient to...
Yearn Finance has suffered a serious attack on its yETH product, allowing an attacker to siphon off roughly one thousand ETH — nearly $3 million — by exploiting a flaw in the mechanics of...
Researchers from Team Z3 have withdrawn their planned demonstration of a WhatsApp vulnerability at the Pwn2Own Ireland 2025 hacking competition — an exploit that could have earned them a record $1 million prize. According...
The DeFi platform Abracadabra.money has once again fallen victim to cybercriminals—its third successful breach in just two years. This time, attackers exploited a vulnerability in outdated token pools on the Ethereum mainnet, allowing them...
The decentralized protocol New Gold Protocol (NGP), operating on the BNB Chain, has fallen victim to an attack in which perpetrators siphoned approximately $2 million from the liquidity pool of its native token. The...
Researchers at SySS GmbH have disclosed a critical vulnerability in the Windows Boot Manager dubbed BitPixie. The flaw permits attackers to bypass BitLocker protections and attain full administrative access to a system. At the...
The Yala protocol has suffered a devastating blow to its ecosystem: on September 14, its Bitcoin-backed stablecoin YU collapsed by nearly 80%—plunging from $1 to $0.20—after attackers exploited a vulnerability in the system. The...
Researchers from Doyensec, together with an independent author known as BitsByWill, have publicly demonstrated a working exploitation chain that enables remote execution of code in the Linux kernel via KSMBD — the in-kernel SMB3...
