OpenSSL HollowByte Flaw Lets 11-Byte Payload Freeze Server Memory
A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service condition on OpenSSL servers with a malicious payload of…
Security
Cybersecurity, vulnerabilities, threats, and defense
7-Zip 26.02 Fixes Critical RCE Flaw Exploitable With Malicious Archives
7-Zip version 26.02 has been released to fix a remote code execution vulnerability that could allow attackers to execute malicious…
WordPress Core wp2shell RCE Flaws Get Public Exploits, Patch Now
Public exploits have been released for critical remote code execution vulnerabilities in WordPress Core dubbed wp2shell, making it imperative that…
Microsoft Patches Record 570 Security Flaws in July 2026 Patch Tuesday
Microsoft released software updates on July 14 to plug at least 570 security holes across Windows and other software, nearly…
OkoBot Malware Framework Targets Crypto Wallet Seed Phrases From Trezor and Ledger Users
A newly identified malware framework called OkoBot has been targeting cryptocurrency hardware wallet users by injecting seed phrase phishing prompts…
Microsoft Warns of Surge in ACR Stealer Attacks Targeting Enterprise Customers
Microsoft has observed a significant increase in attacks using the ACR Stealer malware, which targets enterprise customers by stealing browser-stored…
Bonzo Lend Loses $9 Million on Hedera Network in Supra Oracle Exploit
Bonzo Lend, a lending protocol on the Hedera network, has lost approximately $9 million in a sophisticated oracle exploit that…
ACR Stealer Malware Uses ClickFix Lures to Steal Browser Credentials and Cryptocurrency Wallets
Microsoft has detailed two primary intrusion chains used by the ACR Stealer malware, which has been increasingly targeting enterprise environments…
Consensys Unknowingly Hired North Korean Developer Who Worked on MetaMask Wallet Code
Consensys, the Ethereum software development company behind the popular MetaMask wallet, has disclosed that it unknowingly hired a developer linked…
LabubaRAT Malware Masquerades as NVIDIA Software to Infiltrate Windows Systems
Security researchers have identified a previously undocumented Rust-based remote access trojan called LabubaRAT that masquerades as NVIDIA software to evade…