Cyber Security

OpenAI Cyber Model Uncovers 948 Linux Kernel Privilege Escalation Vulnerabilities

OpenAI says an automated research pipeline found and proved 948 separate Linux kernel privilege escalation flaws in one run. These…

1 day ago

Critical Ruby on Rails Flaw Could Let Hackers Steal Server Secrets Through Malicious Image Uploads

A critical flaw in Ruby on Rails Active Storage lets an unauthenticated user upload a crafted image and make the…

2 days ago

Debian and Ubuntu APT Flaw Lets Hackers Hijack Software Updates and Execute Code as Root

A newly disclosed bug in APT, the package manager behind Debian and Ubuntu, can let a network spy swap a…

2 days ago

French Bank Crédit Mutuel Arkéa Confirms Cyberattack Amid Reports of $133 Million Theft

French banking group Crédit Mutuel Arkéa has confirmed a cyberattack that enabled fraudulent transactions, following reports linking the institution to…

2 days ago

Node.js Schedules High-Severity Security Fixes for 22.x, 24.x, and 26.x Release Lines

The Node.js project has scheduled security updates for its 22.x, 24.x, and 26.x release lines on or shortly after Wednesday,…

2 days ago

Hackers Exploit Zyxel GS1900 Zero-Day in the Wild to Hijack Network Switches

A flaw in Zyxel GS1900 switches was already being used by hackers, and the patch meant to fix it did…

2 days ago

Google Releases Major Chrome Security Update Fixing 213 Bugs, Including 7 Critical Vulnerabilities

Google has released Chrome 157 for Windows, macOS, and Linux, fixing 213 security bugs, including seven rated critical. Announced on…

2 days ago

Google Patches Over 200 Android Vulnerabilities, Including Critical Zero-Click RCE Flaws

Google has released its November 2026 Android security update, addressing more than 200 vulnerabilities across the operating system, kernel, and…

2 days ago

CISA Warns of WordPress Core Vulnerability Exploited in Attacks to Execute Malicious Code

The U.S. Cybersecurity and Infrastructure Security Agency has warned that attackers are exploiting a WordPress Core vulnerability that can allow…

2 days ago

Hackers Use Stolen Microsoft Entra ID and Azure DevOps Credentials to Access 27 Organizations

Hackers are abusing stolen Microsoft Entra ID application credentials and Azure DevOps identities to access Microsoft 365 and Azure environments,…

2 days ago