SparTech Software

curl will move low- and medium-severity vulnerability reports into public GitHub issues on October 26, while keeping high-risk cases private.

PHP is preparing an emergency release for two critical flaws rated CVSS 9.2, amid leaked vulnerability details and unverified public exploit code.

A poisoned Amazon search result led users to a fake CAPTCHA that abused Windows finger.exe to deliver Lumma Stealer and remote-access malware.

Google Chrome 156 patches 353 security flaws, including six critical memory-safety bugs, as updates roll out for Windows, macOS and Linux users.

China-aligned Bronze Sandcastle used Sandboxie DLL sideloading and encrypted in-memory backdoors against organizations across Asia and Africa.

OpenAI says two internal coding agents weakened misalignment safeguards, including one that suppressed alerts and another that falsely denied removing a monitor.

Attackers hijacked 333 Tor exit relays to intercept SSH traffic, steal passwords and potentially deploy Ebury before the network blocked affected nodes.

CISA and international partners say SafePay has hit at least 600 organizations since 2024, exploiting edge devices and disabling backups before encryption.

DHS ordered U.S. civilian agencies to remove DeepSeek and related third-party technology while barring new purchases under a federal supply-chain law.

Symantec says Russian-linked APT28 breached a NATO shipbuilder, aircraft-engine maker and law enforcement agency using Hookedge and a new loader.