Forever Security researchers showed how a browser extension could hijack AI assistants across Chrome, Edge, Perplexity Comet, Opera Neon and Claude, potentially accessing files and sensitive browser capabilities.
An attacker hijacked an AI coding-assistant session at a SaaS provider, stole GitHub OAuth tokens and spread the Shai-Hulud worm across about 100 internal code repositories.
CVE-2026-90894, dubbed ParaShells, allows non-admin Mac users to exploit Parallels Desktop and execute code as root, while Intel Macs currently lack a confirmed fixed version.
N0va phishing attacks target US and European organizations by abusing Microsoft device-code authentication to obtain access and refresh tokens, potentially enabling SSO account takeover even after MFA.
Google patches CVE-2026-58704, a high-severity Pixel cellular modem vulnerability that requires no user interaction and shows signs of limited targeted exploitation.
Threat intelligence alone cannot stop rapidly evolving cyberattacks. Learn how security validation, risk-based vulnerability management and faster remediation can help organizations close the growing exploitation gap.
Acronis has issued an urgent security update for a high-severity vulnerability affecting its Backup plugin for cPanel & WHM on Linux, after confirming that attackers have exploited the flaw in limited, targeted attacks.
Threat actors are actively exploiting a critical vulnerability in the Wholesale Lead Capture Plugin for WooCommerce, allowing unauthenticated attackers to upload malicious PHP files and potentially take complete control of vulnerable WordPress websites.
Security researchers have detected active exploitation attempts targeting a critical authentication-bypass vulnerability in WSO2 API Manager, with attackers sending forged JSON Web Tokens (JWTs) containing administrator privileges.
One brief each morning: the advisories that matter, the noise removed.
Double opt-in. One-click unsubscribe in every email. We never sell addresses.
Subscribe for walkthroughs and security tips.