Ardit Kutleshi created and operated Rydox, which allowed miscreants to trade PII and cybercrime tools and services.

The post Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court appeared first on SecurityWeek.

Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.

The post Windows, Linux, Android File Notification Systems Leak User Activity appeared first on SecurityWeek.

Attackers could exploit the flaws to cause denial-of-service conditions, disclose memory, or modify memory.

The post Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities appeared first on SecurityWeek.

Hackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts.

The post Brevo Supply Chain Attack Injects Malware Into 100,000 Websites appeared first on SecurityWeek.

AI-assisted researchers flooded Vercel with reports, forcing the company to automate vulnerability triage.

The post $1 Million Sandbox Challenge Uncovers Linux Kernel Flaws appeared first on SecurityWeek.

Tracked as CVE-2026-19490, the authentication bypass flaw has been exploited in the wild since at least September 3.

The post Critical NetScaler Vulnerability Exploited in Attacks appeared first on SecurityWeek.

The stealthy toolkit embeds a backdoor in HAProxy and targets automotive and media organizations in South Korea for long-term surveillance.

The post North Korean Hackers Deploy New Linux Espionage Toolkit appeared first on SecurityWeek.

The browser refreshes fix multiple use-after-free, sandbox escape, and privilege escalation bugs.

The post Chrome and Firefox Updates Patch Dozens of Vulnerabilities appeared first on SecurityWeek.

The company has notified the SEC that hackers accessed patient, employee, provider, business, and financial information.

The post Ransomware Gang Claims Nutex Health Data Breach appeared first on SecurityWeek.

CISA has added the exploited flaw, CVE-2026-53362, to its KEV catalog, alongside a JFrog vulnerability exploited by OpenAI agents.

The post OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systems appeared first on SecurityWeek.

CISA is urging government agencies to immediately patch the Citrix NetScaler vulnerability tracked as CVE-2026-8452.

The post Recent Citrix NetScaler Vulnerability Exploited in the Wild appeared first on SecurityWeek.

Kaspersky researchers have linked the malware to the BadBox botnet, which has ensnared millions of devices.

The post First Malware Built Specifically for Car Head Units Fuels Botnet appeared first on SecurityWeek.

Remote, unauthenticated attackers could exploit the critical-severity flaw without user interaction.

The post Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler appeared first on SecurityWeek.

The bugs could lead to code execution, privilege escalation, sandbox escape, and information disclosure.

The post Chrome, Firefox Updates Patch Dozens of Vulnerabilities appeared first on SecurityWeek.