The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) catalog by adding three newly confirmed security flaws that are actively being exploited by attackers. The update, published on August 5, 2026, serves as an…
Security researchers have disclosed three serious vulnerabilities in Paperclip, an open-source control platform designed to manage teams of AI agents. Two of the flaws could allow attackers to execute malicious commands on either a server or a developer’s local machine,…
Security researchers have revealed 12 critical vulnerabilities affecting the popular vm2 Node.js library, exposing applications to sandbox escapes and remote code execution attacks. The vm2 package is widely used by developers to safely run untrusted JavaScript code inside isolated environments.…
Security researchers have disclosed 12 high-severity vulnerabilities affecting the widely used vm2 Node.js library, raising serious concerns for developers and organizations that rely on the package to securely execute untrusted JavaScript code. The open-source vm2 library is commonly used to…
A newly disclosed critical vulnerability affecting Palo Alto Networks PAN-OS software may have been targeted by attackers weeks before public disclosure, according to new findings from the company’s Unit 42 threat intelligence team. The flaw, tracked as CVE-2026-0300, is a…
A state-sponsored hacking group tied to North Korea, known as ScarCruft, has been linked to a supply chain attack involving a gaming platform, where attackers secretly embedded spyware into game components to monitor targeted users. Security researchers from ESET say…
Cybersecurity researchers have uncovered details about a stealth-focused botnet known as Masjesu, a growing threat built to launch distributed denial-of-service (DDoS) attacks while staying under the radar. First appearing around 2023, Masjesu has been promoted on Telegram as a paid…
Cybersecurity researchers have uncovered a previously unknown zero-day vulnerability in Adobe Reader that attackers have been actively exploiting through specially crafted PDF files since late 2025. The issue, analyzed by EXPMON researcher Haifei Li, involves a highly advanced PDF-based exploit…
CISA Adds VMware Aria Operations Flaw to Exploited Vulnerabilities List The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about a newly discovered security flaw affecting Broadcom VMware Aria Operations, adding the vulnerability to its Known Exploited…
Google has revealed that it worked alongside industry partners to dismantle the infrastructure of a suspected China-linked cyber espionage group known as UNC2814. The group is believed to have compromised at least 53 organizations in 42 countries, with additional suspected…
