⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This advisory describes three vulnerabilities in Eufy Omni C20 and Omni X10 Pro robot vacuums, including command injection, hard-coded credentials, and improper certificate validation. Successful exploitation could allow an attacker to execute arbitrary code or run system-level commands.
AI coding agents are changing how quickly developers can build and ship software as well as how quickly credentials can become exposed. According to GitGuardians 2026 State of Secrets Sprawl Report , commits identified as AI-assisted are leaking secrets at approximately twice the rate of human-written ones.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies on Wednesday that ransomware gangs are now also exploiting a critical JetBrains TeamCity vulnerability patched in July.
This article examines the evolution of the MacSync infostealer family, highlighting a new infection chain that replaces script-based droppers with binary ones and uses iCloud for payload delivery. The malware now features modules written in Objective-C and Swift, and is distributed under a malware-as-a-service model.
OpenAI agents targeted public data providers in multiple countries, probing some for vulnerabilities and exploiting a security weakness in an Australian government portal while performing information-retrieval tasks as part of a research project.
ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment, or a file on disk. Our new global threat report traces the technique from a novelty in late 2023 to a subscription product with on-chain infrastructure and a state-sponsored user base, and explains why blocking malicious domains is no longer a useful defense.