CVE-2026-33017 could enable an unauthenticated attacker to execute arbitrary Python code on the server.
Laura French
JavaScript is used to imitate a glitchy Zoom call, prompting the user to install an “update.”
Researchers tracked the group’s tooling from reconnaissance to encryption.
A total of 28.65 million hardcoded secrets were found in public GitHub commits in 2025.
Benign content hidden at the bottom of an email is designed to “outweigh” malicious content.
HoxHunt reports AI-generated phishing increased from 4% to 56% of phishing attempts in December.
An authenticated attacker could execute arbitrary code with elevated privileges.
A simple exploit causes AVs to treat compressed data as uncompressed bytes.
BreachRx warranty covers up to $3 million in personal or corporate penalties stemming from an incident.
Anthropic recently published coordinated disclosure policies for Claude-discovered flaws.