Explore

Trendline Trendline
Ongoing Zero-Day Attack Targets Adobe Reader Users

Ongoing Zero-Day Attack Targets Adobe Reader Users

Ongoing Zero-Day Attack Targets Adobe Reader Users
Rapid Read Rapid Read
Cybersecurity Firm Defiant Warns of Critical Ninja Forms Vulnerability Affecting WordPress Sites

Cybersecurity Firm Defiant Warns of Critical Ninja Forms Vulnerability Affecting WordPress Sites

A critical vulnerability has been identified in the File Uploads addon for the Ninja Forms WordPress plugin, which could allow threat actors to take over vulnerable websites. The cybersecurity firm Defiant has reported that this addon is used by approximately 50,000 websites, and there have been thousands of attempts to exploit the vulnerability. The flaw, tracked as CVE-2026-0740, is an unauthenticated arbitrary file upload issue due to missing file type validation. This vulnerability allows attackers to upload malicious PHP code to a website's server, potentially leading to remote code execution. The issue was discovered and reported via the Wordfence bug bounty program, with a security researcher receiving a reward for identifying the flaw. Users are advised to upgrade to the latest version of the addon to mitigate the risk.
Rapid Read Rapid Read
UNC6783 Cyberattack Targets BPO Companies, Compromises Corporate Data

UNC6783 Cyberattack Targets BPO Companies, Compromises Corporate Data

The UNC6783 threat group has launched a sophisticated cyberattack campaign targeting business process outsourcing (BPO) companies to access corporate data from numerous high-value organizations. According to the Google Threat Intelligence Group (GTIG), the group is linked to the online hacking persona Mr. Raccoon, who is allegedly responsible for a recent Adobe data breach. The attackers exploit trust relationships between organizations and BPO vendors, bypassing perimeter security systems. This supply chain approach represents a strategic shift in cyberattack methods. The group uses malicious emails to deploy Remote Access Tools (RATs) and employs social engineering tactics, such as creating domains that mimic legitimate support infrastructure, to evade detection.
Trendline Trendline
Rapid7 Report Highlights Accelerating Exploitation of Software Vulnerabilities

Rapid7 Report Highlights Accelerating Exploitation of Software Vulnerabilities

Rapid7 Report Highlights Accelerating Exploitation of Software Vulnerabilities
Trendline Trendline
Mercor Faces Challenges After Data Breach Exposes Sensitive Information

Mercor Faces Challenges After Data Breach Exposes Sensitive Information

Mercor Faces Challenges After Data Breach Exposes Sensitive Information
Trendline Trendline
UNC6783 Cyber Group Targets BPO Companies to Steal Corporate Data

UNC6783 Cyber Group Targets BPO Companies to Steal Corporate Data

UNC6783 Cyber Group Targets BPO Companies to Steal Corporate Data
Rapid Read Rapid Read
Skepticism Surrounds Alleged Data Breach of Chinese Supercomputer

Skepticism Surrounds Alleged Data Breach of Chinese Supercomputer

Hackers claiming to have breached the National Supercomputing Center in Tianjin, China, are demanding cryptocurrency for the alleged data. The group, FlamingChina, claims to have stolen 10 petabytes of data related to advanced science and defense agencies. However, security researchers are skeptical about the legitimacy of the breach. The hacker group offered a sample of the data for $3,000 in cryptocurrency, with the full data set available to the highest bidder. Despite the claims, experts question the feasibility of extracting such a large amount of data unnoticed. CNN has reached out to Chinese authorities for comment, but no official response has been provided.
Rapid Read Rapid Read
Critical Marimo Vulnerability Exploited Shortly After Disclosure

Critical Marimo Vulnerability Exploited Shortly After Disclosure

A critical vulnerability in Marimo, an open-source reactive notebook for Python, was exploited within hours of its public disclosure. The flaw, identified as CVE-2026-39987, allows unauthenticated remote code execution due to a lack of authentication validation in the terminal WebSocket endpoint. Sysdig reported that an attacker quickly developed an exploit from the advisory description, leading to credential theft and system command execution. The vulnerability affects all Marimo releases up to version 0.20.4, with users advised to update to version 0.23.0 or newer.
Trendline Trendline
Apache ActiveMQ Classic Vulnerability Exposed After 13 Years, Posing Security Risks

Apache ActiveMQ Classic Vulnerability Exposed After 13 Years, Posing Security Risks

Apache ActiveMQ Classic Vulnerability Exposed After 13 Years, Posing Security Risks
Trendline Trendline
Flowise Vulnerability Exploited by Attackers, Posing Security Risks

Flowise Vulnerability Exploited by Attackers, Posing Security Risks

Flowise Vulnerability Exploited by Attackers, Posing Security Risks
Trendline Trendline
Critical Ninja Forms Vulnerability Exposes WordPress Sites to Takeover

Critical Ninja Forms Vulnerability Exposes WordPress Sites to Takeover

Critical Ninja Forms Vulnerability Exposes WordPress Sites to Takeover
Rapid Read Rapid Read
GPUBreach: New GPU Rowhammer Attack Achieves Root Shell Access

GPUBreach: New GPU Rowhammer Attack Achieves Root Shell Access

Researchers from the University of Toronto have discovered a new Rowhammer attack, named GPUBreach, that targets GPU memory to escalate privileges and achieve root shell access. This attack exploits the Rowhammer technique, which induces bit flips in memory cells through repeated access, to corrupt GPU page tables and enable arbitrary read-write access. The attack leverages memory-safety bugs in Nvidia drivers, posing a significant threat to cloud environments where multiple users share the same GPU. The researchers reported their findings to Nvidia, and major cloud providers like Microsoft, AWS, and Google have been notified.