Critical Flaws in Citrix Clients Demand Immediate Patching
PremiumCitrix Secure Access and Endpoint clients for Windows have a privilege-escalation flaw (CVE-2026-53565) enabling SYSTEM access.
Monday, July 20
Friday, July 17
Critical BitLocker Vulnerability Exposes Windows Devices to Physical Attacks
PremiumBitLocker zero-day CVE-2026-50661 allows physical attackers with hands-on access to bypass device encryption protections.
Advanced Malware Daxin and New Backdoor Stupig Target Taiwan Manufacturer
PremiumDaxin kernel rootkit resurfaces with a new Stupig pre-login backdoor targeting a Taiwan manufacturing firm for persistence.
LegacyHive Zero-Day Exploit Puts Windows User Profiles at Risk
PremiumResearcher published LegacyHive Windows zero-day PoC impacting User Profile Service, enabling arbitrary hive load privilege escalation.
Wednesday, July 15
Miasma v3 Exploits npm Packages to Breach Developer Systems
Miasma v3 delivered via trojanized AsyncAPI packages creates persistent backdoors on developer machines and build servers.
Sophisticated OAuth Client ID Spoofing Tactics Threaten Microsoft Entra Security
Novel OAuth client ID spoofing enables attackers to validate stolen Microsoft Entra credentials and enumerate accounts while evading telemetry.
Monday, July 13
GigaWiper: A New Threat in System-Level Sabotage
PremiumGigaWiper backdoor includes wiper, ransomware encryption and multi-pass wiping commands for destructive sabotage and espionage.
Security Alert: Compromised Jscrambler npm Package Delivers Rust Infostealer
PremiumMalicious jscrambler npm v8.14.0 runs a preinstall hook that drops a cross-platform Rust infostealer during package install.
Friday, July 10
Chrome 150 Update Bolsters Security with 27 Patches
PremiumGoogle's Chrome 150 fixes 27 vulnerabilities, including 13 use-after-free bugs and two critical flaws.
GigaWiper: The Destructive Windows Backdoor Unveiled
PremiumGigaWiper backdoor combines disk-wiping, overwriting, and fake ransomware behaviors to deliver destructive Windows intrusions.
Wednesday, July 8
Friday, June 26
Google Chrome 149 Update Addresses Critical Security Flaws
PremiumChrome 149 fixes 18 severe bugs, many use-after-free with potential remote code execution risks; ensure auto-update is enabled.
Chrome 149 Update Fixes Critical Security Vulnerabilities
PremiumChrome 149 fixes 18 severe bugs, many use-after-free with potential remote code execution risks; ensure auto-update is enabled.
Monday, June 15
Friday, June 12
Wednesday, June 10
Microsoft's June 2026 Patch Tuesday Tackles 198 Vulnerabilities
June 2026 cycle patches 198 flaws, including 3 zero-days actively exploited; prioritize critical systems first.
Critical Chrome Vulnerability Patched to Prevent Active Exploits
Chrome emergency patch closes a zero-day actively exploited, preventing remote code execution in many deployments.
Monday, June 8
Monday, June 1
Critical Zero-Day in Gogs Allows Remote Code Execution
PremiumAuthenticated pull-request variant enables remote code execution. Apply upstream patches and restrict PR flows.
Google Chrome 148 Update Fixes 151 Vulnerabilities, Urgent Update Recommended
PremiumChrome 148 patches 151 vulnerabilities, including critical RCE flaws. Urge immediate browser updates across endpoints.
Get these articles delivered to your inbox.
Subscribe free