A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent …
PoC and Technical Details Released for SharePoint Remote Code Execution Vulnerability
Proof-of-concept (PoC) exploit code and deep technical details have now been released for CVE-2025-53770, a critical remote code execution (RCE) vulnerability in on‑premises Microsoft SharePoint Server. This disclosure raises the …
First-Ever 1- Click Android 17 Exploit Allows Attackers to Gain Full Control Over Your Android Phone
July 8, 2026 A full-chain exploit dubbed “IonStack” demonstrates how a single malicious URL click can hand attackers complete control over an Android device. The proof-of-concept by Nebula Security, described …
CISA Warns of Adobe ColdFusion Path Traversal Vulnerability Exploited in Attacks
July 8, 2026 The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Adobe ColdFusion vulnerability, tracked as CVE-2026-48282, to its Known Exploited Vulnerabilities (KEV) catalog, warning that …
70% of WordPress Sites Running Outdated PHP Versions Exposed to Cyberattacks
A recent study has revealed that more than 70% of publicly accessible WordPress websites are running outdated versions of PHP, significantly increasing their exposure to cyberattacks. The findings highlight a …
Hackers Exploit Roundcube N-Day Flaws to Steal Credentials and Deploy VShell
July 8, 2026 A newly identified hacking campaign is targeting university mail servers by exploiting known but unpatched flaws in Roundcube webmail software. The attackers are using these gaps to …
China-Nexus Hackers Exploit Ruckus Routers to Build Operational Relay Box Networks
July 8, 2026 UAT-7810, a China-nexus hacking group, is expanding a global network of hijacked internet devices by exploiting security flaws in Ruckus wireless routers and rolling out new custom …
15-year-old GhostLock Kernel Flaw Enables Privilege Escalation in Major Linux Distributions
July 8, 2026 A critical Linux kernel vulnerability, tracked as CVE-2026-43499 and dubbed “GhostLock,” has been disclosed by security researchers at VEGA, exposing a privilege escalation flaw that has silently …
OpenAI Reportedly Secures US Government Clearance to Launch GPT-5.6 Model
July 8, 2026 OpenAI has reportedly received approval from the U.S. Department of Commerce for a broad public launch of its advanced GPT-5.6 model, marking a significant moment in how …
Anthropic Extends Free Access to Claude Fable 5 on All Paid Plans
July 8, 2026 Anthropic has extended promotional access to its newest AI model, Claude Fable 5, allowing subscribers on paid plans to use it at no additional cost through July …