GitLab Under Fire as Researcher Releases Working Exploit Code

Security researchers at depthfirst published working exploit code on July 24, 2026,

Two Malicious NPM Packages Steal Sensitive Data From Developer Machines

Two beta release builds of npm packages in the joyfill namespace were

Bing Images Security Flaw Allows Hackers to Run Malicious Code Through SVG Files

A security researcher discovered a critical vulnerability in Microsoft Bing's

New WordPress Flaw Lets Hackers Take Over Websites Through File Uploads

WordPress recently patched a critical vulnerability chain nicknamed wp2shell that allows completely

Hugging Face Patches Critical Vulnerability That Exposed AI Models to Supply Chain Attacks

Hugging Face, the open-source AI platform, recently disclosed that it was

SAP Fixes Critical 9.9 Severity Flaw in NetWeaver ABAP Platform

SAP released its July 2026 security updates addressing several vulnerabilities, with the

Researchers Expose Laser Attack That Resets Tangem Hardware Wallets

Security researchers at Ledger's Donjon team have demonstrated a sophisticated

CISA Warns About 4 New Adobe Flaws Under Active Attack

The U.S. Cybersecurity and Infrastructure Security Agency has added four security

New SkillCloak Technique Lets Malicious Alexa Skills Bypass Amazon Security and Steal User Data

Researchers at the Hong Kong University of Science and Technology have discovered

RustDuck Botnet Evolves with Rust Programming to Evade Detection

RustDuck is a sophisticated two-part malware targeting IoT devices like home

Fake AI Agent Skill Bypasses Security Reviews and Infiltrates Claude AI Store

A security company called AIR demonstrated a critical vulnerability in AI agent

Hackers Exploit Critical WordPress Plugin Flaw to Hijack Email Settings

A critical vulnerability in the Gravity SMTP WordPress plugin, tracked as CVE-