Know what changed. Know what matters.

A malicious Visual Studio Code extension called Solidity Pro has been found stealing users’ crypto wallets and credentials.

Atlassian’s Rovo assistant can be tricked into sending user data to attackers via prompt injection, while recent research shows webmail interfaces are vulnerable to CSS-based XSS that steals credentials and tokens, and a zero‑day in Metabase allows unauthenticated remote attackers to inject SQL for admin access.

Security researchers discovered Atlassian’s AI assistant Rovo can be tricked into sending users’ Jira or Confluence data to attackers.

New CSS attacks allow theft of passwords on popular webmail services.

A critical flaw in Metabase’s business intelligence platform lets attackers inject arbitrary SQL and gain full admin control without authentication.

A new campaign has pushed almost 800 malicious npm packages into the registry, all of which ship cross-platform malware that installs a remote access trojan and steals sensitive data across Windows, macOS, and Linux systems.

A long‑standing use‑after‑free bug in Linux's SCTP networking code now allows local users to gain full root privileges on the host and break out of containers.

A newly discovered Linux kernel flaw lets privileged code inside a nested virtual machine escape isolation and run on its host.

A new Senate report attributes more than $20 billion in consumer losses to data‑broker practices that enable sophisticated scams.

A zero‑auth flaw in Gitea’s Org-mode rendering lets attackers read server files.

A credential‑stealing npm worm linked to keyv@6.0.0 infected at least 868 packages, planting AI‑generated malicious hooks in August.