News
- Drupal patches critical RCE flaws, warns exploits may emerge soon
- Plug-in solar is legal in these 10 states now – how it could save you money
- MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
- Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
Malware
- Eiliko robot companion exposes private chats and can be hijacked
- “Spray and pray” job applications could make it harder for you to spot a scam
- OpenAI sued over children safety and data use
- Inbox flooded with sign-up messages? Email bombing explained
Threat Actors
- The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
- Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
- Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
- When LLM Gateways Go Wrong: Findings from LiteLLM
Vulnerabilities
- GNUnet P2P Framework 0.26.2
- exploit
- Windows Update Orchestrator Service Privilege Escalation
- ReadyScript e-commerce management system File Upload