News
BTCPay Server Vulnerability Is Being Actively Exploited to Drain LND Lightning Nodes
BTCPay Server is under active attack. Learn how the vulnerability exposed LND credentials, drained Lightning nodes, and why users must update!
HCL Technologies Employee Data Claimed Stolen From Azure, 250,000 Records Offered for Sale
A threat actor claims to sell 250,000+ HCLTech employee records allegedly taken from an Azure tenant using compromised credentials
CVE-2026-65400: macOS Screen Sharing Authentication Bypass Can Lead to Root-Level Remote Access
CVE-2026-65400 affects macOS Screen Sharing. Learn how the authentication flaw works, affected versions, exploitation research, detection etc.
Proton VPN Pricing A/B Test: How One HTML Tag Correlates With a €12 Difference in What Customers Pay
An investigation into Proton VPN's pricing page found an A/B-test tag linked to two VPN Plus prices: €2.99 and €3.49 per month
New WordPress Pre-Authentication XSS Could Lead to PHP Code Execution, Patch Immediately
Learn how CVE-2026-64638 affects WordPress, why the pre-authentication XSS is dangerous, how researchers chained it to PHP code execution using XSS2Shell
Metabase Confirms Active Exploitation of Critical SQL Injection Flaw, Urges Immediate Upgrades for Self-Hosted Deployments
Metabase has disclosed a critical SQL injection vulnerability that is actively exploited in the wild. Learn how the attack works, affected versions, IoCs and more
Zapscape: A Technical Deep-dive of the CVE-2026-64561 KVM Guest-to-Host Escape
Discover how Zapscape (CVE-2026-64561) exploits Linux KVM's Shadow MMU to achieve guest-to-host escape, including root cause, exploitation and more
New Interrupt Injection Attack Bypasses Spectre v2 Defenses on Intel and AMD CPUs
MIT CSAIL researchers discovered Interrupt Injection, a new speculative execution attack that bypasses Spectre v2 mitigations on Intel and AMD CPUs
Apple WebKit Flaws Can Leak Real IP Addresses Despite iCloud Private Relay and Proxy Browsers
Researchers discovered three WebKit behaviors that bypass Apple Private Relay and proxy browsers, exposing users' real IP addresses and DNS requests on iOS and macOS
OVSwrap (CVE-2026-64531): How a 13-Year-Old Open vSwitch Bug Became a Reliable Linux Root Exploit
OVSwrap (CVE-2026-64531) is a Linux kernel privilege escalation flaw affecting Open vSwitch. Explore the vulnerability, exploit chain and more
