An unpatched vulnerability in ChromaDB could allow remote, unauthenticated attackers to spawn a shell and take control of the server process, HiddenLayer reports. ChromaDB is an open source vector database for building AI applications. It has approximately 13 million monthly… Read More "Unpatched ChromaDB Vulnerability Can Lead to Server Takeover"
Proof-of-concept (PoC) exploit code has now been released for a recently patched security flaw in the Linux kernel that could allow for local privilege escalation (LPE). Dubbed DirtyDecrypt (aka DirtyCBC), the vulnerability was discovered and reported by the Zellic and… Read More "DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability"
The frequency of cyber-attacks on customer-facing mobile apps has increased rapidly over the past few years, as AI reduces skill, time and cost barriers for threat actors, according to Digital.ai. The DevOps specialist collected telemetry from billions of application instances… Read More "Agentic AI Accelerates Software Builds and Mobile App Attacks"
Good intentions can have unintended consequences. MSHTA is an example. MSHTA (Microsoft HTML Application) has been a part of Windows since 1999 and the release of Win98 SE and Internet Explorer 5.0. It has remained part of Windows throughout, including… Read More "Legacy Windows Tool MSHTA Fuels Surge in Silent Malware Attacks"
The emergence of the new malware playbook represents a fundamental shift in how cyberattacks are executed, with attackers becoming more intelligent, stealthy, and reliant on sophisticated techniques to bypass traditional defenses. In response, EDR must evolve into a comprehensive solution… Read More "Why EDR Must Adapt to Modern Malware"
In February 2026, a phishing-as-a-service (PhaaS) platform called EvilTokens went live. Within five weeks, it had compromised more than 340 Microsoft 365 organizations across five countries. The targets of the platform received a message asking them to enter a short… Read More "How OAuth Consent Bypasses MFA"
Despite Internet Explorer reaching the end of life in 2022, MSHTA is packaged by default on Windows systems and is used as a living-off-the-land (LOLBIN) binary to launch malware. “Even when companies retire legacy products, parts of their ecosystem can… Read More "Internet Explorer may be dead, but its ghost still runs malware"
With the advent of AI-powered vulnerability scanning tools, there is arguably no reason for technology firms to be unaware of bugs in their products, according to the European Union Agency for Cybersecurity’s (ENISA) chief cybersecurity officer. “Now, there is no… Read More "AI Raises the Bar on Vulnerability Awareness and Secure-by-Design Soft"
The notorious B1ack’s Stash dark web carding marketplace has announced the free download of 4.6 million stolen credit card records. The data, it says, was dumped after sellers were caught reselling card data purchased from B1ack’s Stash on competing platforms,… Read More "B1ack’s Stash Marketplace Gives Away 4.6 Million Stolen Credit Cards"
The Week in Vulnerabilities: GitHub Enterprise, Argo CD, Oracle Identity Manager, and Mozilla Security Flaws Cyble weekly vulnerability report shows 1,095 vulnerabilities, PoCs, KEV additions, and active attacks across enterprise, cloud, and open-source. The latest weekly vulnerability Insights report to clients by Cyble provides a detailed… Read More "Weekly Vulnerability Insights: Active Exploits Rise 2026"
