Security researchers have confirmed active exploitation of a critical vulnerability affecting BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA). The flaw, tracked as CVE-2026-1731, carries a CVSS score of 9.9 and allows unauthenticated remote…

Enterprise network security has improved over the years, but mobile devices remain a major weak spot. Unlike traditional endpoints, smartphones constantly switch networks, run many apps, and access sensitive data from anywhere. This makes them…

Anthropic has announced that its latest AI model, Claude Opus 4.6, has discovered over 500 previously unknown high-severity security flaws in widely used open-source libraries, including Ghostscript, OpenSC, and CGIF. This highlights the growing role…

Security researchers have uncovered malicious Python packages on PyPI that pretended to be simple spellchecker tools but secretly delivered a remote access trojan (RAT). The packages, spellcheckerpy and spellcheckpy, were downloaded over 1,000 times before…

Security researchers have discovered a malicious Visual Studio Code extension that impersonated Moltbot (formerly Clawdbot) and claimed to be a free AI coding assistant. The extension was published on the official VS Code Marketplace before…

Security researchers have uncovered a Google Gemini prompt injection vulnerability that allowed attackers to access private Google Calendar data using malicious calendar invites. The flaw abused indirect prompt injection, bypassing authorization controls without direct user…

LastPass is warning users about a renewed phishing campaign impersonating the official LastPass service. The attack aims to steal users’ master passwords by sending fake emails that claim an upcoming system maintenance and urge recipients…

Fortinet has released security updates to fix a critical vulnerability in FortiSIEM that could allow an attacker to execute code remotely without authentication. The flaw is tracked as CVE-2025-64155 and has a CVSS score of…

Cybersecurity researchers have uncovered a new and highly advanced Linux malware framework called VoidLink, designed specifically to operate in cloud and container environments. First discovered in December 2025, this malware is considered a serious threat…