// 1 CRITICAL · 11 ZERO-DAY · 9 CVE · 10 EXPLOIT IN THE LAST 24H
CYBERSEC

Ukrainian Roblox Hackers Arrested: 610,000 Accounts Stolen

Ukrainian police arrest a hacker group that stole over 610,000 Roblox accounts and resold them for cryptocurrency. Learn how they oper…

Apr 29, 2026views - 255

CYBERSEC

NPM Supply Chain Attack: Malware Found in Claude Code and VS Code Extensions

A new SAP npm package supply chain attack targets AI coding agent configurations. Discover how mini Shai-Hulud steals credentials and…

Apr 29, 2026views - 2.5k

CYBERSEC

PromptMink Malware: First Malicious Commit Co-Authored by Anthropic's Claude Opus

The Famous Chollima campaign marks the first instance of a malicious commit co-authored by an AI model, affecting over 1,700 software…

Apr 29, 2026views - 134

CYBERSEC

Vercel Breach: The Risks of Shadow AI OAuth Exposed

The Vercel breach highlights the danger of Shadow AI integrations: how a forgotten OAuth token opened corporate doors. Here is what yo…

Apr 29, 2026views - 170

CYBERSEC

CISA Shutdown: US Cyber Defense on Standby Due to Lack of Funds

CISA.gov is no longer actively managed due to a federal funding lapse. Meanwhile, the FIRESTARTER malware threat targets critical Cisc…

Apr 29, 2026views - 1.1k

CYBERSECEXPLOIT

CISA KEV: Windows and ScreenConnect Added to List of Exploited Vulnerabilities

CISA adds CVE-2024-1708 and CVE-2026-32202 to the KEV catalog. Russian APT28 and Chinese Storm-1175 leverage these flaws for espionage…

Apr 29, 2026views - 146

CYBERSECCRITICAL

Critical cPanel Vulnerability: Urgent Patch and Hosting Access Blocks

A critical cPanel authentication vulnerability forced providers to block access. Learn about the security risks and the importance of…

Apr 29, 2026views - 164

CYBERSEC

The Gentlemen Ransomware: Over 320 Victims and Botnet of 1,570+ Companies

The Gentlemen group becomes the second most active ransomware of 2026. Over 320 victims and a ready botnet: here is the model attracti…

Apr 29, 2026views - 181

CYBERSEC

Scattered Spider: 'Bouquet' Arrested in Helsinki Under US Charges

A 19-year-old dual US-Estonian citizen known as 'Bouquet' has been arrested in Helsinki on US charges related to the Scattered Spider…

Apr 29, 2026views - 176

CYBERSECCVE

CVE-2026-3854: Critical RCE Vulnerability on GitHub Discovered by AI

CVE-2026-3854 puts GitHub Enterprise Server at risk. Discovered via AI, it allowed RCE. Technical details and patch discrepancies insi…

Apr 28, 2026views - 190

CYBERSECCVE

CVE-2026-25874: Unpatched Critical RCE Found in Hugging Face LeRobot

A critical CVSS 9.3 flaw hits Hugging Face's LeRobot. Learn about the RCE risks and the month-long patch delay following initial discl…

Apr 28, 2026views - 205

CYBERSEC

Paragon Spyware: A Year of Silence on the Italian Investigation

Paragon Solutions has not responded to the Italian judiciary on Graphite spyware used against journalists. Here is why the case remain…

Apr 28, 2026views - 212