-
Pwn2Own Berlin 2026 reportedly reached full capacity for the first time, prompting rejected researchers to publicly disclose zero-day exploits targeting Firefox, NVIDIA, and AI platforms.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Operation HumanitarianBait uses fake aid documents, GitHub-hosted payloads, and Python spyware to target Russian-speaking victims.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google researchers say hackers used AI to develop zero-day exploits, Android backdoors, and automated supply chain attacks targeting GitHub and PyPI.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Dirty Frag vulnerability affects Linux systems and allows root access escalation, while public PoC exploit code increases attack risks.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers are abusing Vercel GenAI to create convincing phishing sites that mimic major brands, including Microsoft, Adidas, and Nike, making scams harder to detect.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
DigiCert revokes 60 code signing certificates after hackers used a malicious support chat attachment to sign the Zhong Stealer malware.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
JDownloader confirms a security breach where hackers manipulated official download links to distribute malicious files between 6 and 7 May 2026.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft researchers warn of a new ClickFix campaign targeting macOS with fake guides on Medium and Craft to deploy AMOS and SHub Stealer via Terminal commands.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The ClaudeBleed vulnerability allows hackers to bypass Claude for Chrome guardrails to exfiltrate private Google Drive and Gmail data.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ShinyHunters hackers defaced the official Canvas LMS portal after breaching Instructure systems, disrupting university access worldwide.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶


