Pwnspectrum

The Remote Sunrise Helper vulnerability is causing a chain reaction. An attacker could now remotely execute code on a system, silently gaining control without a user needing to do anything.

The Funnel Builder plugin is being used as a weapon. Attackers are injecting malicious scripts into WooCommerce checkout pages, allowing them to steal credit card information.

Turla's P2P botnet isn't just about one-off breaches; it's about maintaining persistent access to your network, quietly gathering data and waiting for the perfect moment to strike.

The rise of generative AI is creating new attack vectors. PromptSpy is leveraging AI to craft malware for Android devices, showcasing the dangers of this emerging technology.

Windsurf's vulnerability demonstrates that even modified code can harbor serious risks. Attackers could exploit this flaw to gain control of the coding agent and potentially steal secrets.

Even a seemingly helpful AI coding agent can be a security risk. Cline's vulnerability reveals that attackers can leverage markdown rendering to leak sensitive data and compromise developer secrets.

Microsoft is scrambling to fix a critical vulnerability in Exchange Server. Attackers are actively exploiting this flaw to execute arbitrary code, posing a severe threat to network security.

The Pixel 10's vulnerability is frighteningly deep. An attacker can gain kernel control, essentially taking over the device at the most fundamental level.

Microsoft Exchange Server is suffering from a critical XSS vulnerability. Attackers are exploiting this flaw to execute malicious code, potentially disrupting operations and compromising sensitive data.

The Windsurf coding agent's vulnerability highlights the risks associated with forks of established software. Attackers could exploit this flaw to gain control of the agent and potentially steal secrets.

The LummaC2 malware is actively being used to exfiltrate sensitive data from organizations, demonstrating the sophistication and persistence of modern cyber threats.

The PRC's state-sponsored cyber threat actors are targeting networks globally, quietly gathering intelligence and conducting espionage operations.

CISA has identified a new, actively exploited vulnerability. This means systems are already under attack, requiring immediate patching and security assessments.

The Open WebUI platform's XSS vulnerability is a digital trap. Attackers can inject malicious scripts that steal user data, highlighting the importance of secure development practices and input validation.

The Open WebUI platform’s XSS vulnerability is an open invitation to attackers. These are injecting malicious scripts that can steal user data, highlighting the importance of robust security measures.

A 18-year-old vulnerability in the NGINX rewrite module is being exploited! This is a testament to the importance of regular updates and security audits. Attackers are leveraging a long-forgotten flaw to gain unauthorized access.

Three critical vulnerabilities in Adobe PDF software are allowing attackers to execute arbitrary code and leak user information. It’s a serious risk for anyone using these tools – and a reminder to keep your software up-to-date.

Turla, a sophisticated Russian hacking group, has transformed its Kazuar backdoor into a modular P2P botnet, designed for stealth and persistent access to compromised systems. This represents a major escalation in their cyber operations.

A QEMU vulnerability is enabling attackers to deploy ransomware, hidden inside virtual machines. This demonstrates the potential for sophisticated attacks and the need for robust virtual machine security.

The PRC’s state-sponsored cyber threat actors are targeting networks globally, quietly gathering intelligence and conducting espionage operations.

The Windsurf coding agent's vulnerability highlights the risks associated with forks of established software. Attackers could exploit this flaw to gain control of the agent and potentially steal secrets.

A Chinese hacker has been extradited to the US to face charges related to cyber attacks. This case highlights the growing threat of state-sponsored hacking and the importance of international cooperation in combating cybercrime.

Pentest-Tools.com has released a free scanner for CVE-2026-41940, the critical authentication bypass affecting cPanel & WHM, with the vulnerability now in the wild since February 2026. Immediate patching is crucial to prevent widespread exploitation.