News

New X Account Takeover Vulnerability

Breaking: New X Account Takeover Exploit Reportedly Being Used by Threat Actors, Live Footage Surfaces

The CyberSec Guru

A potentially new X account takeover exploit is reportedly being used by threat actors. Live footage has surfaced, but the attack method remains unconfirmed

ServiceNow CVE-2026-18885, CVE-2026-18886 & CVE-2026-74820 Critical CVSS 10.0 Flaws

ServiceNow Patches Three CVSS 10.0 Vulnerabilities Allowing Unauthenticated Code Execution and SQL Injection

The CyberSec Guru

ServiceNow patched three CVSS 10.0 vulnerabilities allowing unauthenticated code execution, privilege escalation and SQL injection

Next.js RCE vulnerability

Critical Next.js & libheif RCE Vulnerabilities: Inside the August 2026 AVIF Zero-Day Exploit Chain

The CyberSec Guru

Critical Next.js RCE vulnerabilities affect AVIF image optimization and Windows servers. Learn about libheif, GHSA-2xp9-vwfh-vxw4, CVE-2026-75604

TeamPCP hackers

Two Alleged TeamPCP Hackers Charged in Australia After Massive Software Supply Chain Attacks

The CyberSec Guru

Two alleged TeamPCP hackers have been charged in Australia over major supply chain attacks targeting Trivy, Checkmarx KICS and LiteLLM. Here's what happened

BFId Wi-Fi identity inference

BFId: How Wi-Fi Beamforming Feedback Can Identify People Without Cameras or a Device

The CyberSec Guru

BFId uses Wi-Fi beamforming feedback to identify people without cameras or devices. Learn how Wi-Fi sensing and BFI create a new privacy threat

Log4j2 deserialization vulnerability

New Log4j2 Flaw Could Enable Remote Code Execution Through Java Deserialization

The CyberSec Guru

A newly reported Log4j2 flaw can bypass deserialization protections through Java MarshalledObject, potentially enabling RCE, DoS and malicious log injection

stayonthegrindd Cyberleek

Before Cyberleek: The Mystery Behind the stayonthegrindd Account and the Early GTA 6 Leak Trail

The CyberSec Guru

New evidence may shed light on the GTA 6 leak timeline. Here’s what the stayonthegrindd Discord account allegedly revealed before Cyberleek’s leaks

PhonePe data leak

Alleged PhonePe Database Published on Cybercrime Forum, But Breach Remains Unverified

The CyberSec Guru

An alleged PhonePe database has been published on a cybercrime forum. Here’s what is known about the claimed PhonePe data leak

PlayStation India blacklisting media

PlayStation India Reportedly Blacklists Media Outlets Over Coverage of Physical Disc Shutdown

The CyberSec Guru

PlayStation India is reportedly blacklisting media over coverage of Sony ending physical game discs in 2028. Here's what the allegations say

GTA 6 leak subpoena

Discord Says It Has Not Been Served With Take-Two’s GTA 6 Leak Subpoena

The CyberSec Guru

Discord says it has not been served with Take-Two's GTA 6 leak subpoena and will evaluate its validity and scope before responding to the request