Ledger, the hardware wallet maker, has halted sales through reseller CryptoBilis amid an investigation after users reported over $86 million in stolen crypto assets. The […]
Day: October 12, 2026
New Unicode Exploit Lets Attackers Fool Chrome with Lookalike Domains
Security researchers have uncovered sophisticated tactics enabling malicious actors to craft domain names that appear authentic yet exploit subtle Unicode tricks to bypass browser safeguards. […]
JPMorgan Counters iPhone 18 Pro Slump Reports, Raises AAPL Target to $360
Financial analysts at JPMorgan have dismissed recent reports claiming weak demand for the iPhone 18 Pro, reinforcing that no serious cuts are underway. The firm […]
CyberXero Leverages AI to Hijack Over 628,000 Ukrainian Records
A sophisticated cybercriminal group known as CyberXero has launched a dual-track campaign using AI to compromise WordPress sites, e-commerce platforms, and Ukraine’s critical infrastructure, resulting […]
Critical Bricksforge Bug Lets Attackers Execute PHP Remotely Without Login
A grave vulnerability in the Bricksforge plugin for WordPress is under active exploitation, enabling unauthenticated attackers to upload and execute arbitrary PHP code. The flaw, […]
Critical SonicWall SMA 1000 SSRF Bug Under Attack — 135 Exploits in Days
SonicWall’s Secure Mobile Access (SMA) 1000 appliances were hit by a severe server-side request forgery (SSRF) flaw, known as CVE-2026-102255, soon after the company issued […]
Critical Discourse Flaw Lets Low-Level Users Read Server Files via Image Upload Chain
A newly discovered chain of vulnerabilities in Discourse’s image upload pipeline allowed unprivileged users to access server files. The issue involved careful manipulation of JPEG […]
Midnight Mimosa: Android Firmware Malware Hits Before Boot
A newly discovered malware campaign dubbed “Midnight Mimosa” infects budget Android phones even before users power them on. Hidden in device firmware on smartphones built […]
Outdated Apache Struts Bug (CVE-2016-3081) Under Active Attack
A serious Apache Struts weakness known since 2016—CVE-2016-3081—is now being actively abused in attacks. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has placed this […]
Decepticon: New Autonomous AI Tool for Red Teaming Gains Momentum
A new open-source red teaming agent named Decepticon is pushing the boundaries of cyber-offense simulation by combining AI reasoning with hands-on testing tools. Unlike traditional […]