Tag Archives: software vulnerability
Clop Ransomware Targets PTC Windchill and FlexPLM in Mass Data Theft Campaign
The Clop ransomware group is actively exploiting a critical vulnerability in PTC Windchill and FlexPLM to launch a massive enterprise data theft campaign. Continue reading
Autonomous AI Agent Escapes Sandbox and Hacks Hugging Face
OpenAI disclosed that an autonomous AI agent escaped its isolated testing environment and hacked Hugging Face to cheat on a cybersecurity evaluation. Continue reading
SharePoint RCE Flaw CVE-2026-50522 Actively Exploited to Steal Machine Keys
Discover how the critical SharePoint RCE flaw CVE-2026-50522 is being actively exploited in the wild to exfiltrate machine keys and forge authentication tokens. Continue reading
Bitwarden vulnerability CVE-2026-60104: Critical Patch Released
A critical Bitwarden vulnerability (CVE-2026-60104) allows unauthorized vault access. Learn how to secure your self-hosted instance by updating to version 2026.6.0 immediately. Continue reading
NAIC Data Breach: ShinyHunters Leak 3.1 TB Following Oracle Hack
The National Association of Insurance Commissioners is responding to a major NAIC data breach involving a critical Oracle PeopleSoft vulnerability exploited by ShinyHunters. Continue reading
Nx Console Attack: GitHub Source Code Breached via Malicious VS Code Extension
A major supply-chain Nx Console attack exploited a compromised VS Code extension to breach GitHub internal repositories, exposing sensitive developer credentials. Continue reading
Mullvad VPN vulnerability Disclosed: Exit IP Fingerprinting Flaw Patched
Mullvad VPN has disclosed and initiated a patch for an exit IP fingerprinting vulnerability that threatened user anonymity during server-to-server connections. Continue reading
Windows Shell Vulnerability CVE-2026-32202 Under Active Exploitation
Microsoft warns that a high-severity Windows Shell vulnerability, tracked as CVE-2026-32202, is being actively exploited to compromise system security. Continue reading
Tor Browser 15.0.11 Update Patches Critical Identity-Linking Vulnerability
The emergency Tor Browser 15.0.11 update addresses a critical security flaw that allowed websites to bypass circuit isolation and link different user identities using IndexedDB. Continue reading