Virexa
HomeAIProgrammingCloudSecurityOpen SourceGamesMobile GamesDeveloper Hub
Sign InSign Up
Virexa
Sign InSign Up
AIProgrammingCloudSecurityOpen SourceGamesMobile GamesDeveloper Hub
Virexa

Modern AI news aggregation and newsletter platform covering technology, business, AI, games and world news.

Categories

  • AI
  • Programming
  • Cloud
  • Security
  • Open Source
  • Developer Hub

Company

  • About
  • Contact
  • Advertise

Resources

  • RSS Feed
  • API
  • Privacy Policy
  • Terms of Service

© 2026 Virexa. All rights reserved.

Virexa
HomeAIProgrammingCloudSecurityOpen SourceGamesMobile GamesDeveloper Hub
Sign InSign Up
Virexa
Sign InSign Up
AIProgrammingCloudSecurityOpen SourceGamesMobile GamesDeveloper Hub
Virexa
HomeAIProgrammingCloudSecurityOpen SourceGamesMobile GamesDeveloper Hub
Sign InSign Up
Virexa
Sign InSign Up
AIProgrammingCloudSecurityOpen SourceGamesMobile GamesDeveloper Hub
Home›Security

Explore

Security

Security news, CVEs, vulnerabilities and industry advisories.

Filters

301 results • Page 12 of 26

New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands
SecuritySecurity Advisory

New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account. Tracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The

The Hacker News·July 29, 2026·1 min read
← Previous1…1011121314…26Next →
🔥

Developer Pulse

What developers are discussing today

  • Zero-Day↗7.5K
  • OWASP↗4.8K
  • CVEs↗3.9K
  • Cloudflare→3.2K
  • Bug Bounty↗2.1K
Claude Mythos Preview Finds Vulnerability in Weakened Form of AES
SecuritySecurity Advisory

Claude Mythos Preview Finds Vulnerability in Weakened Form of AES

1 point 0 comments on Hacker News · nytimes.com

Hacker News·July 29, 2026·1 min read
Healthcare Is Undergoing A Cybersecurity Crisis, And Its Not Slowing Down
SecuritySecurity Advisory

Healthcare Is Undergoing A Cybersecurity Crisis, And Its Not Slowing Down

As the reliance on technology increases, healthcare leaders need to invest heavily in cyber-protection measures.

Forbes·July 29, 2026·1 min read
United States Bans Chinese Humanoid & Quadruped Robots, Citing National Security
SecuritySecurity Advisory

United States Bans Chinese Humanoid & Quadruped Robots, Citing National Security

Citing security and economic reasons, the U.S. FCC has moved to ban foreign humanoid robots as well as quadruped robots from the American market.

Forbes·July 29, 2026·1 min read
Cyera agrees to acquire Oasis Security for $1B to safeguard proliferating AI agents
SecuritySecurity Advisory

Cyera agrees to acquire Oasis Security for $1B to safeguard proliferating AI agents

The deal is Cyera's third acquisition this year.

TechCrunch·July 29, 2026·1 min read
Codex Security
SecuritySecurity Advisory

Codex Security

589 points 225 comments on Hacker News · github.com

Hacker News·July 28, 2026·1 min read
Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process
SecuritySecurity Advisory

Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process

A new Mirai-derived botnet called Tengu can use a compromised Linux device's hardware watchdog to trigger a reboot when defenders kill its main process. If that happens, Tengu's other persistence mechanisms get another chance to relaunch it. Nozomi Networks Labs observed the dropper reaching its honeypots through Telnet credential brute force. Tengu supports 25 distributed denial-of-service (

The Hacker News·July 28, 2026·1 min read
24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login
SecuritySecurity Advisory

24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login

Cybersecurity researchers have sounded an alert after finding more than 36,000 Baseboard Management Controller (BMC) management interfaces exposing Intelligent Platform Management Interface (IPMI) protocol to the public internet. Of the 36,872 internet-exposed server-management interfaces running IPMI, 24,650 have been found to disclose password-derived authentication hashes before login due to

The Hacker News·July 28, 2026·1 min read
JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach
SecuritySecurity Advisory

JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach

JFrog has confirmed that OpenAI models exploited a zero-day in self-hosted Artifactory while trying to reach the open internet from a sealed evaluation environment. Artifactory is JFrog's software repository manager. OpenAI says the models then escalated privileges and moved laterally until they reached an internet-connected node. JFrog says it has since developed and released fixes for cloud

The Hacker News·July 28, 2026·1 min read
Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root
SecuritySecurity Advisory

Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root

OpenWrt has shipped version 24.10.8 to close a critical DHCPv6 stack overflow and a wider set of remotely triggerable flaws in network services enabled by default. The critical issue, tracked as CVE-2026-53921 and rated 9.8 on CVSS 3.1 in OpenWrt's GitHub advisory, lets an unauthenticated attacker able to reach the DHCPv6 server overwrite a stack buffer in odhcpd through a crafted DHCPv6

The Hacker News·July 28, 2026·1 min read
Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays
SecuritySecurity Advisory

Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays

The Iranian state-backed hacking group tracked as Nimbus Manticore (aka GalaxyGato, Mirage Kitten, Smoke Sandstorm, Subtle Snail, and UNC1549) has been attributed to a fresh set of attacks targeting entities across the Middle East, Africa, and South Asia. The intrusions involve the use of a previously undocumented Windows backdoor called NightLedger and two custom WebSocket tunnelers,

The Hacker News·July 28, 2026·1 min read
Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In
SecuritySecurity Advisory

Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In

JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery of a critical security issue that could result in arbitrary code execution. The vulnerability, assigned CVE-2026-63077 (CVSS score: 9.8), affects all TeamCity On-Premises versions. It has been addressed in versions 2025.11.7 and 2026.1.3. TeamCity Cloud instances have already

The Hacker News·July 28, 2026·1 min read
Ransomware
↘1.7K
💬

Top Discussion

r/

r/netsec

“A critical zero-day is being actively exploited in the wild”

15.2K1,100 comments
View discussion→

Filters

Time
Categories
Sources
Content Type