Guru Baran

A significant data breach has hit SplitVPN, a Russian VPN provider formerly known as NotVPN, exposing the personal records of roughly 865,000 unique users.

AI systems moved from experimental risk to confirmed attacker, a Cisco firewall zero-day was actively exploited in the wild, and a critical VMware authentication bypass put enterprise virtualization infrastructure at risk.

A set of high-severity vulnerabilities in Hugging Face's diffusers library that allow a malicious model repository to silently execute arbitrary code on any machine that loads it.

Attackers have compromised the GitHub account of the maintainer behind keyv, a popular key-value storage library that pulls in roughly 127 million weekly downloads on npm, and used that access to push credential-stealing malware across the maintainer's entire package portfolio.

Three distinct Phishing-as-a-Service (PhaaS) platforms Sneaky 2FA, EvilTokens, and EvilProxy are actively targeting US organizations to steal Microsoft 365 (M365) credentials and session tokens, effectively neutralizing standard multi-factor authentication (MFA) protections.

A shadowy online service called Poison Claude is reselling access to Anthropic's premium AI models at a significant discount. Researchers suggest that these savings are coming from an unexpected source: cloud accounts that have been fraudulently registered and filled with free bonus credits.

Thousands of Blogger website owners woke up this week to a jarring surprise: their perfectly legitimate blogs had been locked and slapped with a "Malware and Similar Malicious Content" violation notice.

A critical one-click remote code execution (RCE) vulnerability affects three of the world's most widely used code editors: Cursor, Microsoft VS Code, and Google Antigravity.

Cisco has rolled out software hardening updates for its Catalyst SD-WAN Software after an internal security review uncovered multiple critical vulnerabilities affecting the platform.

Cybercriminals are weaponizing pirated downloads of the blockbuster theatrical release "The Odyssey (2026)" to deliver Lumma Stealer.