SecurityWeek

Aqua’s Trivy Vulnerability Scanner Hit by Supply Chain Attack

Aqua Security’s Trivy vulnerability scanner was compromised in a supply chain attack, leading to information-stealing ...

iOS 26 Security Update Warning—iOS 18 Silent Compromise Exploit Alert

Apple confirms hidden iOS 26 security update, and Google confirms silent iOS 18 spyware compromise. What you need to know and ...

Trivy vulnerability scanner breach pushed infostealer via GitHub Actions

The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...
TidBITS

DarkSword Exploit Threatens iPhones Still Running iOS 18

Security researchers have discovered DarkSword, a sophisticated exploit chain targeting iOS 18.4 through 18.7.2. Unlike past spyware aimed at high-profile targets, DarkSword is being surreptitiously ...

Someone has publicly leaked an exploit kit that can hack millions of iPhones

Leaked "DarkSword" exploits published to GitHub allow hackers and cybercriminals to target iPhone users running old versions ...
CPO Magazine

Security Flaw at the U.K.’s Business Registry Exposes Organizations’ Data

A security flaw at the U.K.’s business registry, Companies House, exposed the personal information of business executives and ...

Microsoft Confirms SQL Zero-Day Security Vulnerability—Here’s The Fix

Microsoft has confirmed that a hacker who successfully exploits a zero-day SQL vulnerability could gain system administrator privileges. Here’s how to fix it.
CPO Magazine

Infostealer Using New “DarkSword” iOS Exploit Chain Deployed by Russian Threat Actors

DarkSword packs both a complete iOS exploit chain and infostealer into one package. The chain initiates when Safari opens a ...
Windows Report

VoidStealer Malware Exploits Chrome Memory to Extract Encryption Keys

Chrome users face a new threat as VoidStealer 2.0 bypasses ABE protections and steals data during browser startup processes.
StateTech Magazine

Vulnerability Exploitability eXchange: Smarter Patching for State and Local IT Teams

VEX helps public-sector security teams prioritize repairs by identifying which vulnerabilities affect their systems.
Crowdfund Insider

Movie Token Exploit Examined by Blockchain Security Firm CertiK

Blockchain security firm CertiK has released a detailed forensic breakdown of the March 10, 2026, exploit that drained roughly $242,000.
SecurityWeek

Russian APT Exploits Zimbra Vulnerability Against Ukraine

Russia-linked APT28 has exploited a high-severity XSS vulnerability in Zimbra in attacks against Ukrainian entities.