Ravie LakshmananJun 17, 2026Malware / Cryptocurrency As many as 144 npm packages associated with the Mastra namespace (“@mastra/*”), a popular […]
Category: Security
CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution
Ravie LakshmananJun 17, 2026Vulnerability / Supply Chain Attack The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a […]
Holiday season is here — but watch out, hackers are launching more phishing scams and attacks than ever before
(Image credit: Booking.com) Check Point Research warns summer vacation scams are surging, with hospitality/travel firms hit by 2,291 weekly attacks […]
‘These attacks don’t look like break-ins’ — HP warns hackers are turning popular remote access tools into dangerous, stealthy backdoors
Legitimate software is now the most dangerous weapon in a hacker’s arsenal, HP warns Tax deadline phishing emails are opening […]
Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting
Swati KhandelwalJun 16, 2026Machine Learning / Cloud Security A flaw in the Google Cloud Vertex AI SDK for Python let […]
Maine takes down its data breach notification portal after it is flooded by fake claims
(Image credit: Shutterstock) Maine AG’s breach reporting portal abused with fake notices impersonating Discord and VRChat False reports submitted via […]
ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures
Cybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Loader, Lorem Ipsum Loader, and Potemkin, […]
Over 1 million WordPress sites at risk after popular plugin hacked — OptinMonster among those hit in CDN supply-chain attack
(Image credit: Shutterstock/David MG) Vulnerability in UpdraftPlus plugin on Awesome Motive’s marketing server enabled CDN compromise and malicious JavaScript injection […]
Microsoft 365 Copilot can be turned into a one-click data theft tool — inbox, OneDrive, and SharePoint data all at risk, so patch now
(Image credit: sarayut Thaneerat/ via Getty Images) Varonis uncovered “SearchLeak,” chaining three flaws in Microsoft 365 Copilot to enable one‑click […]
Google says Chinese hackers cracked Workspace security to hit ‘a diverse set of national, state, and private medical entities’ including research and defense organizations
(Image credit: Getty Images) Google GTIG exposes UNC6508, a PRC‑linked group exploiting REDCap servers with custom INFINITERED malware Attackers stole […]