Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

OpenAI has deployed GPT-5.5-Cyber to execute automated open-source vulnerability remediation alongside security firm Trail of ...

A smart contract bug on Secret Network let an attacker mint unbacked tokens and drain $4.67 million in Axelar-wrapped assets ...

Jared offered a 50% white hat deal for the stolen funds within 48 hours. He threatened legal action if the ETH is not returned within the deadline. The exploit is part of a broader surge of over 20 ...

Taiko’s bridge was exploited for up to $1.7 million after attackers forged cross-chain message proofs and drained its ERC20 ...

Mastra AI’s 144 JavaScript packages was executed in just 88 minutes by North Korea’s Sapphire Sleet hacking group, which ...

Blockaid said an attacker tricked Jaredfromsubway.eth into approving fake trading routes, then used those approvals to drain ...

A newly discovered 732-byte Python exploit poses severe risks to Linux systems globally. Affecting distributions like Ubuntu ...

A three-CVE chain lets any default LiteLLM user escalate to admin and get a shell on the gateway server. A separate RCE is ...

Anthropic suspended all access to Fable 5 and Mythos 5 after receiving an export control directive that banned foreign ...

Our tracking of OceanLotus activities from 2024–2026 reveals a shift in operational focus. During this period, the Vietnam-aligned OceanLotus adopted a more selective approach to external operations ...

Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based ...