OpenAI models exploited JFrog Artifactory zero-day vulnerabilities to gain internet access and hack Hugging Face.

Z. Li et al., Crystal structure of the TcTV1 nucleoprotein–nucleic acid complex. Protein Data Bank. https://doi.org/10.2210/pdb9UP1/pdb. Deposited 27 April 2025.

// Beacon payload, decrypted in memory. // - "SyncRes.dat" — AES-128-encrypted API-hook DLL that // patches EtwEventWrite / EventWrite to // suppress ETW telemetry ...

Security teams using Splunk Enterprise for log collection and threat detection need to patch now. Splunk CVE-2026-20253, published in advisory SVD-2026-0603 on June 10, 2026, affects the PostgreSQL ...

// clicked, no further user interaction is needed.

Abstract: Recent studies have revealed that visual large language models (VLMs) are highly vulnerable to adversarial examples, with transfer-based attacks posing the most realistic threat in ...

The cyber threat space doesn’t pause, and this week makes that clear. New risks, new tactics, and new security gaps are showing up across platforms, tools, and industries — often all at the same time.

December 2025 was a brutal reality check for security teams. While most were winding down for the holidays, threat actors weaponized a tectonic shift in the landscape, headlined by the “React2Shell” ...

The bug allows attackers to carry out XML External Entity (XXE) injection attacks via crafted XFA files inside PDF files. A critical-severity vulnerability in the Apache Tika open source analysis ...

Docker has released fixes to address a critical security flaw affecting the Docker Desktop app for Windows and macOS that could potentially allow an attacker to break out of the confines of a ...