A critical Linux vulnerability, tracked as CVE-2026-31431 and named CopyFail, was publicly disclosed on Wednesday after being privately reported to the Linux kernel security team five weeks prior. The…
Checkmarx, a security firm, has suffered multiple supply-chain attacks over the past 40 days, including two separate malware distribution incidents via its compromised GitHub account and a subsequent …
A threat actor compromised the open-source package element-data, which has over 1 million monthly downloads, by exploiting a vulnerability in a GitHub action to steal signing keys and account tokens. …
A security researcher discovered that hundreds of subdomains belonging to at least 34 prestigious universities, including UC Berkeley, Columbia, and Washington University in St. Louis, are serving exp…
A ransomware family called Kyber has become the first confirmed to use post-quantum cryptography, employing the NIST-standardized ML-KEM1024 algorithm to encrypt victims' data with AES-256. Security f…
Microsoft released an emergency patch for ASP.NET Core to fix a high-severity vulnerability (CVE-2026-40372) that allows unauthenticated attackers to gain SYSTEM privileges on Linux and macOS devices.…