Vulnerabilities

Critical Flaw in wolfSSL Library Enables Forged Certificate Use

A vulnerability in the wolfSSL SSL/TLS library allows weakened verification of ECDSA signatures, potentially enabling forged certificate acceptance.

Thirumala Rao Padilam April 13, 2026

Threat Intelligence

Anthropic Limits AI Model After Discovery of Zero-Day Exploits Across Major Systems

Anthropic restricted access to its Mythos Preview AI model following its autonomous discovery and exploitation of zero-day vulnerabilities...

Thirumala Rao Padilam April 13, 2026

Vulnerabilities

Critical PDF Zero-Day and State-Sponsored Infrastructure Attacks Surface in Latest Threat Recap

A critical zero-day vulnerability hidden in PDF files and state-sponsored attacks on infrastructure have been recently uncovered, highlighting...

Thirumala Rao Padilam April 13, 2026

Vulnerabilities

Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621

Adobe has issued an emergency update to address a critical vulnerability in Acrobat Reader that is being actively...

Thirumala Rao Padilam April 12, 2026

Vulnerabilities

Critical Pre-Authentication Remote Code Execution Vulnerability in Marimo Under Active Exploitation

A critical pre-authentication remote code execution flaw in Marimo is currently being actively exploited by attackers for credential...

Thirumala Rao Padilam April 12, 2026

Vulnerabilities

CPUID Website Breach Distributes STX RAT via Trojanized CPU-Z and HWMonitor Downloads

The CPUID website was breached for under 24 hours, resulting in malicious versions of CPU-Z and HWMonitor containing...

Thirumala Rao Padilam April 12, 2026

Threat Intelligence

APT28 Conducts Malwareless Espionage by Modifying DNS Settings on Vulnerable SOHO Routers

Russia-linked APT28 is carrying out cyber espionage by altering DNS configurations in vulnerable small office/home office routers, bypassing...

Thirumala Rao Padilam April 9, 2026

Vulnerabilities

New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips

Academic researchers have discovered multiple RowHammer attacks targeting GPUs, including GPUBreach, which can escalate privileges and potentially gain...

Thirumala Rao Padilam April 7, 2026

Ransomware

China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware

A China-based group named Storm-1175 has been identified using zero-day and N-day vulnerabilities in fast-paced attacks to spread...

Thirumala Rao Padilam April 7, 2026

AI Security

Active Exploitation of Critical RCE Vulnerability in Flowise AI Platform

A critical remote code execution flaw in the Flowise open-source AI platform is being actively exploited, exposing over...

Thirumala Rao Padilam April 7, 2026