WeWorm: Zero-Click WeChat Worm Hijacks iOS and Android
Security firm Calif has disclosed WeWorm, a zero-click worm that hijacks WeChat accounts via a regular…
Category
Security
FalconFlank Zero-Day Hits CrowdStrike Falcon Sensor
A security researcher known as Chaotic Eclipse has released FalconFlank, a proof-of-concept zero-day that escalates privileges…
Stale GitHub Token Let ChainDrop Worm Poison Keyv, Cacheable
Jared Wray, founder and CEO of Hyphen AI and maintainer of the Keyv and Cacheable npm…
PrettyPrague Zero-Day Exploit Hits Avast Antivirus
A security researcher known as Chaotic Eclipse has released a working proof-of-concept exploit for an unpatched…
Virtualizor Compromised via BGP Hijack, Hosts Hit Hard
A BGP hijack against Virtualizor’s update infrastructure pushed a malicious package onto VPS hypervisors running the…
cPanel Patches CVE-2026-65643 Root Code Execution Flaw
cPanel has patched CVE-2026-65643, a flaw in its domain parking and addon domain functionality that lets…
Next.js Patches Two Critical RCE Flaws in 15.5.24, 16.3.3
Vercel has patched two critical remote code execution flaws in Next.js: one that triggers when the…
Core Lightning Vulnerabilities Prompt CLN Offline Warning
Blockstream’s Core Lightning team has told node operators to install an embargoed security build or shut…
Signal Contact Discovery Enclave Flaws Allow Code Execution
Security research firm V12 has disclosed two vulnerabilities in Signal’s Contact Discovery Service that allowed the…