Software Vulnerability
23 articles in this category
Microsoft Office Zero-Day (CVE-2026-21509) - Emergency Patch Issued for Active Exploitation
Microsoft released an emergency patch for the actively exploited Microsoft Office zero-day, CVE-2026-21509, a security feature bypass affecting millions of users.
AI-Driven Malware Exploits Open-Source Trust: VS Code Extension and npm Packages
A malicious VS Code extension with ransomware capabilities and 17 npm packages distributing Vidar Infostealer highlight AI's role in modern supply chain attacks, exploiting open-source ecosystems.
CISA Adds Gladinet and CWP Vulnerabilities to KEV Catalog Amid Active Exploitation
CISA has added critical vulnerabilities in Gladinet, CWP, and WordPress plugins to its KEV catalog, emphasizing urgent patching due to active exploitation in the wild.
Critical Security Flaws in Microsoft Teams Enable Impersonation and Undetected Message Manipulation
Four Microsoft Teams vulnerabilities allowed attackers to impersonate colleagues, edit messages without detection, and manipulate notifications, exposing users to social engineering and phishing risks.
OpenAI Unveils Aardvark: GPT-5 Agent for Automated Security Vulnerability Detection and Patching
OpenAI’s Aardvark, powered by GPT-5, autonomously identifies and patches security flaws in code, revolutionizing AI-driven cybersecurity with continuous threat detection and real-time patch generation.
New 'Brash' Exploit Crashes Chromium Browsers Instantly with a Single Malicious URL
A critical vulnerability in Chromium's Blink engine, dubbed 'Brash,' allows attackers to crash browsers instantly via DOM overloads, affecting Chrome, Edge, Brave, and others.
PhantomRaven Malware Exploits npm Packages to Steal Developer Secrets
Researchers identify PhantomRaven, a supply chain attack using 126 malicious npm packages to steal GitHub tokens and CI/CD secrets by exploiting remote dependencies and AI-generated package names.
10 Malicious npm Packages Caught Stealing Developer Credentials Across Operating Systems
Cybersecurity researchers uncovered 10 typosquatted npm packages that deliver a 24MB PyInstaller info stealer, stealing credentials from Windows, macOS, and Linux systems via obfuscation and postinstall hooks.