Google Chrome blocked unauthorized HTTPS certificates after .gh, .sl and .as registry hijacks let attackers pass domain checks for Google and other domains.
Denmark\'s Central Person Register breach exposed names, addresses and CPR numbers in 8.8 million records after attackers misused legal access.
LibreOffice Calc and Apache OpenOffice Calc flaws let crafted spreadsheets run attacker-supplied Java code on open, bypassing macro and active-content prompts.
An alleged ShinyHunters hacker detained in Jordan is cooperating with the FBI. Get the latest on the data breach probe, seized infrastructure, and next steps.
Apple CoreGraphics CVE-2026-86950 has a PoC that crashes iOS and macOS with malicious PDF fonts, and Apple says it may have been used in targeted attacks.
Star Blizzard phishing campaigns hit more than 100 organizations and delivered the CosmicPulse backdoor through RedFlick using compromised legitimate websites.
ChatGPT Custom GPTs and Google Sites helped deliver a ClickFix lure that installed a RAT on dozens of devices, with at least 40 incidents tied to it.
Citrix NetScaler flaws CVE-2026-88771 and CVE-2026-88772 were exploited before disclosure, enabling remote code execution and theft of session tokens.
Oracle PeopleSoft CVE-2026-35273 is under renewed mass exploitation by UNC6240, which bypasses WAFs and steals HR, payroll and student data across sectors.
CISA adds SharePoint RCE and MikroTik RouterOS vulnerabilities to its Known Exploited Vulnerabilities catalog after reported exploitation.
