Install
Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
Active Exploitation Alert: Threat Actors Abuse Anthropic Claude AI to Extract Secrets from 1.8M Android Apps in Major Credential Theft Campaign
3+ hour, 41+ min ago (367+ words) Rescana Technical Analysis of Malware/TTPs The attack chain began with the automated mass-download of 1.8 million Android APKs from multiple app stores using a distributed pipeline orchestrated on ten AWS EC2 instances. The APKs were decompiled and scanned for hardcoded secrets…...
Weekly Cybersecurity Newsletter Bulletin – Microsoft 0-day, FortiOS, PAN-OS Flaw, Revolut Data Breach, and 20+ Stories
8+ hour, 8+ min ago (997+ words) This week’s roundup covers a massive Microsoft Patch Tuesday with two exploited zero-days, active FortiGate exploitation, a critical PAN-OS root-level RCE flaw, the Revolut KYC data breach, and more than 20 other stories spanning AI-driven cyberattacks, browser and firewall zero-days, and…...
LTM Collaborates with IBM and Red Hat on AI-Driven Open-Source Software Remediation
9+ hour, 23+ min ago (556+ words) LTM, the Business Creativity partner to the world's largest enterprises, has announced a collaboration with IBM and Red Hat on Lightwell to help organisations strengthen open-source software supply chains through AI-driven vulnerability remediation. The collaboration is aimed at helping enterprises…...
GitLab Multiple Vulnerabilities
9+ hour, 30+ min ago (110+ words) TYPE: Servers - Other Servers Multiple vulnerabilities were identified in GitLab. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure, remote code execution, cross-site scripting, denial of service condition and security restriction bypass on the targeted…...
Bitcoin Lightning Development Kit v0.2.6 Fixes Fund Theft and Restart Bugs
19+ hour, 5+ min ago (333+ words) Lightning Development Kit, a toolkit for building Bitcoin Lightning applications, released v0.2.6 on Sept. 9 with fixes for bugs that could divert small amounts of a node’s funds or prevent saved channel state from loading. LDK packages a Lightning implementation as a…...
One Overlooked Query Parameter: How a Single Line of Unsanitized Input Can Undo a Platform’s Entire…
9+ hour, 20+ min ago (483+ words) A field note from a penetration tester on discovering — and responsibly disclosing — a reflected XSS vulnerability on a live job-search platform. Every once in a while, you stumble onto a vulnerability while doing absolutely nothing sophisticated. No custom tooling, no…...
Top 43 AI Security Skills, MCP Servers & GitHub Repos Every Bug Hunter Needs
9+ hour, 20+ min ago (35+ words) Top 43 AI Skills, MCP Servers & GitHub Repos Every Bug Hunter Needs The AI-security corner of GitHub is moving too fast for its own good. Half the tools worth using didn’t exist eighteen months …...
Moli Builds a Rust Browser That Uses 10x Less Memory Than Chrome
16+ hour, 2+ min ago (215+ words) Moli is a headless browser built in Rust from scratch that skips rendering by default, cutting memory use to roughly one-tenth of Chrome for agent workloads. Moli, a new Rust project, implements a headless browser for AI agents without wrapping…...
Apple's Last Actively Exploited Bug Disclosure Was iOS 26.2, Nine Months Ago
15+ hour, 47+ min ago (203+ words) The most recent Apple security document to say a bug may have been exploited is iOS 26.2, published December 12, 2025. Both flagged issues sat in WebKit, and Apple credited Google’s Threat Analysis Group on each one. Six Apple releases since then, running…...
I Built a Network Sniffer in Python During My Internship — Here’s What Nobody Tells You About It
12+ hour ago (1247+ words) By Sourav Bouri | B.Tech CSE (IOT CS BCT) Student | Cybersecurity Enthusiast Let me be honest with you. When I got the task — “Build a Basic Network Sniffer” — I thought it would be straightforward. Install some library, write 30 lines, done. Submit....