Technology

Ravie LakshmananJul 14, 2026Vulnerability / Network Security Cybersecurity researchers have disclosed details of two access control-related flaws impacting…

Cybersecurity researchers have discovered 11 old, Microsoft-signed, Unified Extensible Firmware Interface (UEFI) applications that could be abused to…

A campaign of 148 npm packages disguised as student web proxies turned visitors' browsers into a distributed denial-of-service…

xAI's Grok Build coding CLI was uploading entire Git repositories, full commit history and all, to a Google…

The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) has designated two individuals and a VPN service…

Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corporate Salesforce environments…

Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibe-coded PowerShell script for…

Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across Chrome and…

Ravie LakshmananJul 13, 2026Endpoint Security / Cybercrime Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer…

Give an AI assistant a memory and access to your inbox, and you hand an attacker a way…