Collaborate Disseminate
A critical cPanel vulnerability lets attackers bypass login and gain root access, with active exploitation reported before patches were released. Continue reading Critical cPanel Vulnerability Lets Attackers Bypass Login, Gain Root Access
Private chats and photos of celebrities and influencers were exposed after a suspected stalkerware setup left a database open, revealing sensitive messages and files. Continue reading Private Chats, Photos of Celebs Exposed in Suspected Stalkerware Leak
A misconfigured server linked to the carding marketplace Jerry’s Store exposed 345,000 stolen credit cards after an AI coding error caused a major security flaw. Continue reading Misconfigured Server Run by Hackers Leaks 345,000 Stolen Credit Cards
Linux Kernel Vulnerability “Copy Fail” lets attackers gain root access via memory flaw. Patch now or disable algif_aead to stay secure. Continue reading 9-Year-Old Linux Kernel Vulnerability “Copy Fail” Enables Full Root Access
PocketOS founder says Cursor AI agent deleted its production database in 9 seconds after misusing a root API token, exposing major Railway security flaws. Continue reading Cursor AI Agent Wipes PocketOS Database and Backups in 9 Seconds
Bluekit Phishing Kit is a new PhaaS tool that targets major platforms, using AiTM techniques to steal session data and bypass MFA protections. Continue reading New AI-Powered Bluekit Phishing Kit Targets Major Platforms with MFA Bypass Attacks
A hacker using the alias “Xorcat” claims to have breached Polymarket using API flaws, but research suggests the leak could be just data scraping incident. Continue reading Polymarket Rejects Data Breach Claims as Hacker Alleges 300K Records Stolen
Novee researchers find high-severity CVE-2026-26268 flaw in Cursor AI, allowing hackers to run malicious code when developers clone repositories. Continue reading Cursor AI IDE vulnerability allows code execution via hidden Git hooks
Forcepoint’s X-Labs reports an 11-step DHL phishing scam that uses fake OTP codes and EmailJS to harvest user credentials and device telemetry. Continue reading New DHL Phishing Scam Uses 11-Step Attack Chain to Steal Passwords
Security experts have found a high-severity flaw named Pack2TheRoot in PackageKit that allows hackers to gain full root access on multiple Linux distributions. Continue reading Pack2TheRoot: 12-Year-Old Linux PackageKit Flaw Enables Full Compromise