LabubaRAT Malware Masquerades as NVIDIA Software to Infiltrate Windows Systems
Security researchers have identified a previously undocumented Rust-based remote access trojan called LabubaRAT that masquerades as NVIDIA software to evade…
Security
Cybersecurity, vulnerabilities, threats, and defense
RabbitMQ Vulnerabilities Could Leak OAuth Secrets and Expose Cross-Tenant Data
Security researchers have disclosed two access control vulnerabilities in the RabbitMQ message broker service that could allow attackers to leak…
CrashStealer macOS Malware Uses Notarized Dropper to Bypass Apple Security Checks
Security researchers at Jamf Threat Labs have identified a new macOS information stealer called CrashStealer that is capable of harvesting…
n8n Token Exchange Flaw Could Allow Attackers to Authenticate as Other Users
n8n, the workflow automation platform, has patched a security vulnerability in its Enterprise edition that could have allowed attackers to…
Claude Chrome Extension Vulnerability Could Let Malicious Extensions Access Gmail and Connected Services
A security flaw in Anthropic’s Claude for Chrome browser extension could allow a malicious browser extension to trigger predefined AI…
Trusted Volumes Hacker Returns 1,122 ETH to Protocol, Keeps $2 Million Bounty
A hacker involved in the Trusted Volumes exploit has returned 1,122 ETH to the protocol, resolving part of a security…
Ostium Vault Exploiter Moves 10,540 ETH to Tornado Cash After $24 Million Drain
The exploiter behind the Ostium vault hack has begun moving stolen funds through Tornado Cash, with blockchain security firm PeckShield…
Researchers Uncover TuxBot v3 IoT Botnet Framework With Signs of LLM-Assisted Development
Cybersecurity researchers have disclosed details of an updated Internet-of-Things botnet framework dubbed TuxBot v3 Evolution that shows indications of being…
New ClickLock macOS Malware Tricks Users Into Revealing Login Passwords
Security researchers have identified a new macOS information-stealing malware dubbed ClickLock that forces victims to enter their system login password…
Critical WordPress Core Vulnerability CVE-2026-63030 Allows Unauthenticated Remote Code Execution
A critical unauthenticated remote code execution vulnerability has been disclosed in WordPress Core, affecting versions 6.9.0 through 6.9.4 and 7.0.0…