SparTech Software

Texas utility CenterPoint Energy confirms a breach after a hacker leaked customer records, raising concerns over exposed personal and billing data.

Attackers hijacked HBO Max’s verified Reddit ad account in a PasteSwitch ClickFix campaign, pushing 108 malvertising posts that installed cross-platform infostealers.

Apple’s iOS 27 and macOS Golden Gate 27 ship with fixes for more than 200 vulnerabilities, including serious kernel bugs, giving defenders a patching sprint.

A human attacker abused Marimo's CVE-2026-39987 pre-auth RCE to pivot from an exposed WebSocket to an SSH bastion in eight seconds, highlighting urgent patch gaps.[9][1][3]

Revolut says a fake government email request exposed passports, selfies and bitcoin histories for a limited set of customers in a social-engineering data breach.

A critical one-click remote code execution flaw in Tencent's Sogou Input Method for Windows is being exploited by China-aligned hackers to deploy backdoors.

New research ties May’s GemStuffer incident on RubyGems to OpenAI test agents that uploaded thousands of malicious packages, disrupting signups and exposing supply-chain risk.

BlueMoon exploit kit chains Chrome and Windows zero-day flaws in a patch-gap attack wave, giving espionage actors click-to-SYSTEM access on targets.

Anthropic blocked Claude accounts tied to militants in Houthi-held Yemen who tried to use the AI to build missile guidance software and test a guided rocket.

An AI-orchestrated campaign against PaperCut NG/MF exploited two high-severity flaws to breach 395 organizations, compressing the cyber kill chain to minutes.