May 12, 2026 A critical security flaw in Fortinet’s FortiSandbox platform is putting enterprise networks at serious risk, allowing unauthenticated attackers to execute arbitrary code or commands remotely, with no …
Threat Actors Leverage Vercel’s AI Tools to Mass‑Produce Realistic Phishing Sites
May 12, 2026 A new and growing wave of phishing attacks is making credential theft easier than ever before. Threat actors are now using Vercel, a legitimate AI-powered web development …
Zoom Rooms and Workplace Vulnerabilities Allow Attackers to Escalate Privileges
May 12, 2026 A series of newly discovered vulnerabilities in Zoom’s software ecosystem could hand local attackers the keys to your system. As organizations continue to rely heavily on virtual …
North Korean Hackers Weaponize Git Hooks to Deploy Cross-Platform Malware
May 12, 2026 North Korean hackers have found a new way to hide malware inside the tools that software developers rely on every single day. Instead of sending phishing emails …
Malicious Chrome MV3 Extension Impersonates TronLink to Steal Crypto Wallet Credentials
May 12, 2026 A fake Chrome browser extension pretending to be the popular TronLink crypto wallet has been caught stealing sensitive wallet credentials from unsuspecting users. The malicious extension operates …
MistralAI PyPI Package Compromised to Inject Malicious Code – Microsoft Warns
May 12, 2026 A popular AI development library has been turned into a weapon. The mistralai PyPI package, version 2.4.6, was found to contain malicious code secretly injected by attackers, …
Claude’s Chrome Extension Vulnerability Allows Malicious Extensions to Steal Gmail and Drive Data
May 12, 2026 Researchers have exposed a catastrophic vulnerability hiding inside the “Claude in Chrome” extension. By weaponizing an otherwise harmless, zero-permission extension, invisible attackers can completely hijack the trusted …
Critical PHP SOAP Extension Vulnerabilities Enables Remote Code Execution Attacks
May 12, 2026 A serious cluster of vulnerabilities has been uncovered in PHP’s core string processing and ext-soap components, putting numerous web servers at immediate risk of total takeover. While …
Magecart Hackers Abuse Google Tag Manager to Inject Credit Card Skimmers
May 12, 2026 Online shoppers have long been targets of digital theft, but a recent wave of attacks has raised the stakes in a troubling new way. Hackers tied to …
TeamPCP Compromised Checkmarx Jenkins AST Plugin Following KICS Supply Chain Attack
May 12, 2026 A supply chain attack that started with a relatively obscure open-source scanner has now reached one of the most widely used application security tools in the industry. …