Critical DifyTap Flaws Let Attackers Silently Wiretap AI Conversations on Dify’s 1M-App Platform
Four newly identified vulnerabilities in Dify, the...
Apple Fixes High-Severity Beats Bluetooth Eavesdropping Flaw
Apple has released Beats Firmware Update 1B211 to address a...
Critical QNAP NAS Flaws Let Attackers Execute Commands
QNAP has released security advisory QSA-26-10,...
Gravity SMTP Flaw Under Active Exploitation Across WordPress Sites
Security researchers are warning WordPress administrators...
Node.js Patches 12 Flaws Including TLS Bypass and DoS Bug
The Node.js project has issued critical security updates...
Critical Splunk Auth Bypass Flaw CVE-2026-20253 Actively Exploited
The U.S. Cybersecurity and Infrastructure Security Agency...
HazyBeacon Malware Hijacks AWS Lambda for Covert C2 Attacks
A sophisticated cloud-native malware campaign, tracked...
CVE-2026-50656: RoguePlanet Zero-Day Bypasses Microsoft Defender
Microsoft has officially confirmed a newly disclosed...
CVE-2026-4020: Gravity SMTP Flaw Exposes 100K WordPress Sites
Threat actors are actively exploiting a critical security...
Critical Joomla Plugin Flaw Allows Unauthenticated PHP Code Execution
A critical improper access control vulnerability has been...