Angry Hacker Drops Microsoft Zero-Day Exploit, 1 Billion Users Warned

A security researcher frustrated with Microsoft has released the BlueHammer Windows zero-day exploit, telling the company, “I'm not explaining how this works.” ...
Morning Overview on MSN

A 732-byte exploit gives attackers root access on every major Linux distribution — CISA says patch by May 15

It takes 732 bytes. That is roughly the length of this paragraph, and it is all an attacker needs to seize full root control ...
Morning Overview on MSN

Apple’s leaked ‘Coruna’ and ‘DarkSword’ exploit kits are indiscriminately targeting iPhones running anything below iOS 26.2

Two leaked iPhone exploit kits are now circulating beyond the hands of the surveillance vendors that originally built them, ...

CISA says ‘Copy Fail’ flaw now exploited to root Linux systems

CISA has warned that threat actors have started exploiting the "Copy Fail" Linux security vulnerability in the wild, one day ...

The most severe Linux threat to surface in years catches the world flat-footed

Publicly released exploit code for an effectively unpatched vulnerability that gives root access to virtually all releases of ...

Ekubo DEX Users Drained for $1.4M in Token Approval Exploit

Learn more Ekubo DEX users lost $1.4M WBTC yesterday after attackers exploited a flaw in its EVM swap router, highlighting ...
Blockonomi

ZetaChain’s $334K Gateway Exploit: How a Chained Vulnerability Drained Team Wallets Across 4 Chains

ZetaChain lost $334K in a targeted GatewayEVM exploit on April 26. No user funds were affected. A patch is now being deployed ...
Ars Technica

Exploit released for 9.8-severity PaperCut flaw already under attack

Exploit code for a critical printer software vulnerability became publicly available on Monday in a release that may exacerbate the threat of malware attacks that have already been underway for the ...
TechSpot

GPT-4 can exploit zero-day security vulnerabilities all by itself, a new study finds

A hot potato: GPT-4 stands as the newest multimodal large language model (LLM) crafted by OpenAI. This foundational model, currently accessible to customers as part of the paid ChatGPT Plus line, ...
AppleInsider

Exploit that delivered Pegasus spyware patched in iOS 16.6.1 update

Apple's operating system updates on Thursday patched an exploit chain capable of compromising iOS 16.6 devices with the Pegasus spyware without any interaction from the victim. The exploit was ...

Apple Issues Rare Patch: Up to 270M iPhones Could Be Vulnerable to ‘DarkSword’ Exploit

Apple issues a rare iOS 18 security patch as the DarkSword exploit threatens up to 270 million iPhones, marking a shift in ...
Decrypt

Litecoin Rewrites Transaction History After Exploit, Apologizes for Social Posts

Litecoin was affected by a bug this weekend that allowed an attacker to transfer digital assets—transactions that were later ...