The game's servers have been attacked by hackers, potentially causing frequent player disconnections.
CVE-2026-85097 allows attackers to take control of targeted WordPress sites and is already being exploited.
GitLab urges immediate patching of a CI/CD regex compiler vulnerability that could allow remote attackers to execute arbitrary code.
k8s-config-connector has an unpatched cross-namespace secret theft vulnerability; a CVE identifier has been requested.
kubernetes/cloud-provider-gcp has a credential leak vulnerability; a CVE identifier has been requested.
Hackers stole personal information including patients' names, addresses, email addresses, dates of birth and phone numbers.
The article warns that ADB 5555 can serve as an overlooked entry point into internal networks without authentication.
The article discusses availability design for 迪康 network access control, focusing on fallback mechanisms and high-availability architecture.
The second tutorial introducing PHP fundamentals to cybersecurity beginners.
The article uses a code audit to examine the blacklist bypass and post-authentication injection issues in CVE-2024-57521.
Bitdefender found that some low-cost Android devices sold online had malware installed before delivery to buyers.
Attackers exploited a critical vulnerability in SMA 1000 devices within days of its public disclosure.
The case involves ShinyHunters; the suspect is believed to be a Canadian cybersecurity executive who traveled to the US for a conference.
Path sequences can be injected into affected applications' view names to bypass template root directory restrictions.
A CVSS 10.0 vulnerability in the WordPress plugin Bricksforge is being actively exploited.
Using medical imaging as a case study, the research explores efficient, secure federated learning through information-theoretically secure key distribution.
CVE-2026-102255 is a pre-authentication SSRF vulnerability that allows attackers to perform unauthorized operations.
AI patches that prevent crashes often still fail maintainers' validation.
The vulnerability could let unauthorized attackers exhaust GPU server resources.
The entry raises the possibility that Zod 4.6.6 may have been compromised by malware, without confirming it.
Microsoft urges users to update Windows devices promptly, warning that they may stop receiving security fixes once the certificates used to authenticate update servers expire.
CyberXero used Claude Code in an operation to steal Ukrainian records.
Starting February 10, 2027, its default TLS certificate validity will drop from 90 days to 64 days, requiring websites to renew more frequently.
The World Economic Forum's cybersecurity chief discusses how AI, geopolitics and industrialized fraud are reshaping cyber risks.
A study of 112 real security vulnerabilities found that patches preventing crashes often fail project maintainers' fix validation.
Other developments include a breach at a top-level domain registrar, the arrest of a Qilin member in Japan, and Google's suspension of its open-source vulnerability rewards program over AI-generated junk submissions.
The co-founder says crypto card operations continue as usual, trading wallets and the app are unaffected, and the administrator console involved contains no customer data.
REA connects AI coding with reverse-engineering tools, while Anthropic launches a free AI vulnerability scanner.
The report covers three CVE identifiers, including a platform vulnerability with a CVSS score of 10.0 that is being actively exploited.
The article calls fingerprints the new cookies, emphasizing their role in tracking.