Explore

Trendline Trendline
GitHub Vulnerability Exposes Millions of Repositories to Potential Exploits

GitHub Vulnerability Exposes Millions of Repositories to Potential Exploits

GitHub Vulnerability Exposes Millions of Repositories to Potential Exploits
Trendline Trendline
GitHub Patches Critical RCE Vulnerability Affecting Millions of Repositories

GitHub Patches Critical RCE Vulnerability Affecting Millions of Repositories

GitHub Patches Critical RCE Vulnerability Affecting Millions of Repositories
Trendline Trendline
GitHub Patches Critical Remote Code Execution Vulnerability Affecting Millions of Repositories

GitHub Patches Critical Remote Code Execution Vulnerability Affecting Millions of Repositories

GitHub Patches Critical Remote Code Execution Vulnerability Affecting Millions of Repositories
Rapid Read Rapid Read
Critical OpenSSH Vulnerability Requires Immediate Patching to Prevent Exploitation

Critical OpenSSH Vulnerability Requires Immediate Patching to Prevent Exploitation

A critical vulnerability has been discovered in OpenSSH, a widely used tool for remote server management. This vulnerability, identified as CVE-2026-35414, affects nearly all versions of OpenSSH released over the past 15 years. It allows attackers to gain root access to affected servers, enabling them to execute commands, steal data, and disrupt operations. The vulnerability arises from the mishandling of the authorized_keys principals option in specific scenarios involving a Certificate Authority. The Centre for Cybersecurity Belgium has issued a warning, urging organizations to update to OpenSSH version 10.3 or later to mitigate the risk.
Rapid Read Rapid Read
GlassWorm Malware Linked to Dozens of Open VSX Extension Clones

GlassWorm Malware Linked to Dozens of Open VSX Extension Clones

Security firm Socket has identified over 70 suspicious extensions on the Open VSX marketplace linked to the GlassWorm malware. These extensions, which are clones of popular ones, were published by newly created GitHub accounts. GlassWorm, first appearing in October 2025, is designed to steal credentials and cryptocurrency. The extensions are likely sleeper agents, intended to deploy malware through future updates. This pattern of cloned extensions mirrors previous GlassWorm waves, where extensions are initially published without a payload and later updated to deliver malware.
Trendline Trendline
Pack2TheRoot Vulnerability in Linux Poses Security Risks

Pack2TheRoot Vulnerability in Linux Poses Security Risks

Pack2TheRoot Vulnerability in Linux Poses Security Risks
Trendline Trendline
cPanel WHM Vulnerability Exposes Internet Infrastructure to Authentication Bypass

cPanel WHM Vulnerability Exposes Internet Infrastructure to Authentication Bypass

cPanel WHM Vulnerability Exposes Internet Infrastructure to Authentication Bypass
Rapid Read Rapid Read
Critical Bug in Cursor Software Poses Security Risk for Developers

Critical Bug in Cursor Software Poses Security Risk for Developers

A critical vulnerability has been identified in Cursor's software that could potentially allow remote code execution (RCE) through routine Git operations. The flaw involves the use of Git hooks and bare repositories, which could be exploited by embedding a malicious repository within a legitimate project. This vulnerability has been patched by Cursor, and there are no reports of it being exploited in the wild. The issue highlights the importance of securing software development tools against potential cyber threats.
Trendline Trendline
Open VSX Marketplace Extensions Linked to GlassWorm Malware Threaten User Security

Open VSX Marketplace Extensions Linked to GlassWorm Malware Threaten User Security

Open VSX Marketplace Extensions Linked to GlassWorm Malware Threaten User Security
Trendline Trendline
Checkmarx Confirms Data Theft in Supply Chain Attack Affecting Open Source Project

Checkmarx Confirms Data Theft in Supply Chain Attack Affecting Open Source Project

Checkmarx Confirms Data Theft in Supply Chain Attack Affecting Open Source Project
Rapid Read Rapid Read
Mozilla Patches Firefox Vulnerability Allowing Tor User Fingerprinting

Mozilla Patches Firefox Vulnerability Allowing Tor User Fingerprinting

Researchers have identified a vulnerability in Firefox that could allow threat actors to fingerprint users, even in Private Browsing mode. This issue also affects the Tor browser, which is based on Firefox. The vulnerability, tracked as CVE-2026-6770, involves the IndexedDB browser API, which stores structured data on the client side. Firefox uses internal UUID mappings for IndexedDB database names, and the order of these databases remains consistent across different sites while the same browser process is running. This consistency allows unrelated sites to link a user's activity across domains without cookies or shared storage. Mozilla has addressed this issue with the release of Firefox 150, assigning it a 'medium severity' rating. The Tor Project has also implemented the patch in its latest browser update.
Trendline Trendline
Firefox Vulnerability Enables Tor User Fingerprinting Despite Privacy Measures

Firefox Vulnerability Enables Tor User Fingerprinting Despite Privacy Measures

Firefox Vulnerability Enables Tor User Fingerprinting Despite Privacy Measures