Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

How MCP Servers Can Expose Enterprise Secrets

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies

Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner