Overview Rapid7 Labs discovered a critical argument injection (CWE-88) vulnerability in Gogs, a popular open-source self-hosted Git service. Rapid7 Labs scores this vulnerability as CVSSv4…
The CrowdStrike-led takedown, conducted alongside Google and the Shadowserver Foundation, disrupted infrastructure linked to the campaign that had poisoned hundreds of repositories with malicious packages…
The U.S. White House, through its Office of Management and Budget, issued a new federal cybersecurity directive ordering agencies to adopt a risk-based logging and…
GuidePoint Security, a cybersecurity advisor and services partner organizations rely on to protect what matters most, announced launch of its Supply Chain Detection & Response…
Learn how attackers exploit automated bot traffic as part of software supply chain attacks to artificially inflate download counters and mask malicious payloads as legitimate.…
Carnival Corporation, the world’s largest cruise line operator, has confirmed a data breach affecting nearly 6 million people claimed by the ShinyHunters extortion gang in…
A critical security vulnerability in Gitea’s built-in container registry exposes private container images to unauthenticated attackers, raising significant concerns for organizations that rely on self-hosted…
“We would not say that every single phishing message we observed was definitively caused by a direct compromise of the hotel’s own internal systems,” the…
A newly disclosed phishing technique dubbed “VaultJacking” is raising serious concerns across the cybersecurity community after researchers demonstrated how a single captured Google Password Manager…
Microsoft’s Windows 365 for Agents, a cloud PC platform for agentic workloads, runs AI agents in secure environments. Organizations can direct agents with natural language…
Ravie LakshmananMay 28, 2026Supply Chain Attack / Malware A new campaign orchestrated by a previously undocumented threat actor has targeted cryptocurrency organizations with an aim…
The ravenous power and cooling requirements of graphics processing units (GPUs) in artificial intelligence (AI) processing are set to make direct-to-chip liquid cooling mandatory. This…
