news

A severe security flaw in the LiteSpeed User-End cPanel Plugin, allowing attackers to execute arbitrary code as root, is currently being exploited in the wild. The vulnerability, tracked as CVE-2026-48172, carries a crit

A sophisticated software supply chain attack has compromised popular PHP packages for Laravel-Lang, injecting a potent credential-stealing framework designed to operate across Windows, Linux, and macOS. Published: 2026-0

A new cybersecurity initiative leveraging advanced AI models has identified over 10,000 high-severity flaws in critical global software, prompting calls for accelerated patching and enhanced defensive strategies. Publish

A coordinated campaign has targeted eight packages on the Packagist repository, injecting malicious code that downloads and executes a Linux binary from GitHub. This sophisticated attack exploits cross-ecosystem vulnerab

GitHub has introduced new security features for npm, aiming to bolster the software supply chain by giving package maintainers greater control over releases and installations. These updates address the growing threat of

A coordinated international law enforcement effort has successfully dismantled a criminal virtual private network (VPN) service that facilitated the operations of numerous ransomware groups and other cybercriminals. The