Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed 'Click2Shell' that affects the platform's Core component ...

Two China-linked groups ran identical Chrome/Windows zero-day exploits against NGOs, deploying different backdoors each.

A likely Russian-speaking threat actor used hundreds of AI agents to automate exploitation of PaperCut NG/MF vulnerabilities, compromising at least 440 servers linked to 395 organizations across 48 ...

Two critical vulnerabilities in PaperCut servers, CVE-2026-81578 and CVE-2026-82078, are being actively exploited, allowing attackers to execute commands, steal credentials, and potentially create ...

This ranking judges autonomous pentesting tools by proof over volume. Astra Security tops the list with dual agents that chain findings into real attack paths and a walled-off validator that ...

Lost Ark will still be getting the previously-announced second round of server merges in September, but they’ll happen just a little later than expected. The team has a new update on the merges, as ...

Der Anbieter der Exploits stellt weitreichende Behauptungen über die Funktionalität seiner Schadsoftware auf. Im Falle von Outlook Web Access soll ein Cross-Site-Scripting-Angriff (XSS) dazu in der ...

An Attacker used an approveAndCall function to mint unbacked SAND on Base and BNB, with Blockaid estimating a nominal face value of roughly $49 billion. The Sandbox disabled bridging on affected ...

The open-source payment processor is funding a recovery bounty worth 10% of any funds returned, capped at 3 Bitcoins, and says it will prioritize security patches over new features indefinitely.

Foundation and Citadel21 reported drained Lightning nodes, but the total amount stolen and number of affected operators remain unknown. BTCPay Server has temporarily restricted public remote ...

Today we’re proud to announce that Metasploit Framework version 6.5 has been released. Over the past two years, with the help of countless contributors, we’ve added 422 new modules along with a whole ...