GhostAction operators add GitHub-themed phishing and a VS Code-triggered stealer to compromised repositories, with 94 carrying the second stage.

BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. Remote Support is the company's ...

Polyglot Upload: The form_file_upload REST endpoint validates the MIME type of the uploaded file. A polyglot file (valid PNG/GIF header followed by PHP code) passes this check.

Ledger confirmed the exploit; at least one device linked to the CryptoBilis wallet-drain investigation contained an unauthorized hardware implant, with the estimated potential losses reaching $93 ...

A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication.

The application's JWT verification logic trusts the jku (JWK Set URL) header claim without restricting it to a pinned or allowlisted host. An attacker can set jku to point at a self-hosted JSON Web ...