Know what changed. Know what matters.

A fake Web3 accelerator has distributed information‑stealing malware and backdoors to Windows and macOS users through malicious npm packages.

ConnectWise disabled seven application identities after attackers compromised Microsoft 365 tenants.

Modern phishing attacks now embed QR codes that redirect victims to counterfeit login portals, urging users to double‑check sender details before clicking any link.

A newly discovered npm package named imgdecode contains a hidden Windows shellcode loader that attackers use to compromise Node.js environments.

TryHackMe’s new “Please” challenge room focuses on SQL injection and XSS techniques, giving participants hands‑on experience with common web vulnerabilities.

A critical flaw in Linux’s KVM hypervisor now lets an attacker inside one VM control all others on the same host.

A newly disclosed Linux kernel flaw lets virtual machines read host memory through a race‑condition attack.

Drupal’s October 14 update closes a core flaw that could let attackers run arbitrary code on sites through contributed modules, even without logging in.

A flaw in Cisco’s Secure Email Gateway lets attackers write files and run commands as root by sending specially crafted attachments.

Docker patched a two-year old access-control bug that let users impersonate others when converting personal accounts into organizations.

Three chained vulnerabilities in LG’s webOS let attackers gain root access to certain smart TVs from the same local network without user interaction or a PIN.

Cryptocurrency maker Ledger paused sales via reseller CryptoBilis after discovering unauthorized hardware implants linked to over $86 million in stolen funds.