Latest

Positive Technologies has unveiled a comprehensive online portal that aggregates software and hardware vulnerability data from vendors around the world—aimed at helping cybersecurity professionals, ethical hackers, and businesses stay ahead of emerging threats. The platform, which already catalogs over 317,000 vulnerabilities, includes detailed entries on each flaw, information

Imagine your AI model had a universal plug — a single way to connect to tools, apps, and external systems, no matter where they’re hosted or what language they’re written in. That’s essentially what the Model Context Protocol (MCP) is: a standardized, open protocol that lets AI agents

Daniel Stenberg, founder and lead developer of Curl, is considering shutting down the project’s bug bounty program after being overwhelmed by AI-generated junk reports. The influx of low-quality submissions—often indistinguishable from spam—has become a serious burden on the small team maintaining one of the internet’s most

Google has released patches for six security vulnerabilities in its Chrome browser, including a critical sandbox escape flaw that has already been exploited in the wild. The vulnerability, tracked as CVE-2025-6558 and assigned a CVSS score of 8.8, was discovered by Clément Lecigne and Vlad Stolyarov of Google’s

Security researchers have discovered a new variant of the Android malware Konfety that uses a corrupted ZIP structure and advanced obfuscation techniques to bypass static analysis and evade detection by security tools. Masquerading as Legitimate Apps Konfety disguises itself as legitimate Android applications, closely mimicking the look and feel of

Law enforcement agencies have dismantled the Diskstation ransomware group, a Romanian cybercriminal gang responsible for crippling the operations of multiple companies in Italy by encrypting their systems and demanding ransom payments. The international operation—codenamed "Operation Elicius"—was led by Europol, with support from police forces in France

North Korean hackers have uploaded 67 malicious packages to the npm registry, spreading a new malware loader dubbed XORIndex. According to cybersecurity firm Socket, these packages were downloaded over 17,000 times before being discovered and taken down. The operation is part of an ongoing campaign known as Contagious Interview,