Cyber Security News

Critical Twonky Server Vulnerabilities Let Attackers Bypass Authentication

Twonky Server version 8.5.2 contains two critical authentication bypass vulnerabilities that allow unauthenticated attackers to gain full administrative access to…

1 day ago

Researchers Disclosed Analysis of Rhadamanthys Loader’s Anti-Sandboxing and Anti-AV Emulation Features

Rhadamanthys has emerged as one of the most dangerous stealer malware programs since its first appearance in 2022. This advanced…

1 day ago

NSA Issues Guidance for ISPs and Network Defenders to Combat Malicious Activity

The National Security Agency (NSA), in collaboration with the Cybersecurity and Infrastructure Security Agency (CISA), the FBI, and multiple international…

1 day ago

Ollama Vulnerabilities Let Attackers Execute Arbitrary Code by Parsing of Malicious Model Files

A severe vulnerability in Ollama, one of GitHub's most popular open-source projects, with over 155,000 stars. The flaw enables attackers…

1 day ago

CISA Warns of Google Chrome 0-Day Vulnerability Exploited in Attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert about a zero-day vulnerability in Google Chrome,…

1 day ago

pi GPT Tool Turns Your Raspberry Pi into A ChatGPT Powered AI-managed device

pi GPT, a custom integration for OpenAI's ChatGPT that transforms everyday Raspberry Pi devices into fully managed AI-powered workstations. Announced…

1 day ago

China-Nexus APT Group Leverages DLL Sideloading Technique to Attack Government and Media Sectors

A targeted cyber espionage campaign has emerged across Southeast Asia, specifically affecting government and media organizations in countries surrounding the…

1 day ago

Hackers Can Exploit Default ServiceNow AI Assistants Configurations to Launch Prompt Injection Attacks

A dangerous vulnerability in ServiceNow's Now Assist AI platform allows attackers to execute second-order prompt injection attacks via default agent…

1 day ago

Cline AI Coding Agent Vulnerabilities Enables Prompt Injection, Code Execution, and Data Leakage

Cline is an open-source AI coding agent with 3.8 million installs and over 52,000 GitHub stars. Contains four critical security…

1 day ago

Hackers Attacking Palo Alto Networks’ GlobalProtect VPN Portals with 2.3 Million Attacks

Hackers have unleashed over 2.3 million malicious sessions against Palo Alto Networks' GlobalProtect VPN portals since November 14, 2025, according…

1 day ago