DeadLock Ransomware Puts Its Negotiation Portal On-Chain
Every ransomware crew eventually loses its website. DeadLock’s operators appear to have decided not to have…
Category
Security
Researchers Buy ‘No Reply’ Domains and Get Company Data
Fifteen dollars is roughly what it costs to start reading email your company thinks nobody receives.…
Metabase Zero-Day Exposes Framework, Tally Customer Data
Two companies told customers this week that their personal data had been stolen. Neither was breached…
Public Exploit Lands for WordPress XSS2Shell Core Flaw
A working proof-of-concept exploit for “XSS2Shell” is now circulating publicly, raising the stakes on a WordPress…
Zapscape KVM Flaw Lets Guest VMs Seize Host Root
Security researcher Hyunwoo Kim closed out his KVM escape trilogy today with Zapscape (CVE-2026-64561), and this…
Mac Malware Checks Your GPU Before Showing Its Lure
The crews behind a long-running macOS scam have started doing something defenders usually do: vetting who…
Researchers Chain WordPress RCE to Fileless Linux Root
Security researchers have shown that the critical wp2shell WordPress flaw doesn’t have to stop at a…
Human Reviewer Caught AI Agent’s Malware Pull Request
The thing that stopped an AI agent from poisoning a public open-source project last month wasn’t…
Phishers Abuse Service Workers to Hijack Microsoft Logins
A phishing campaign documented by Kaspersky turns an ordinary browser feature into a credential-stealing proxy, letting…