Virexa

Home AI Programming Cloud Security Open Source Games Mobile Games Developer Hub

Sign In Sign Up

Search news, topics or sources

Search news, topics or sources

Sign In Sign Up

AI Programming Cloud Security Open Source Games Mobile Games Developer Hub

Modern AI news aggregation and newsletter platform covering technology, business, AI, games and world news.

Categories

AI
Programming
Cloud
Security
Open Source
Developer Hub

Company

About
Contact
Advertise

Resources

RSS Feed
API
Privacy Policy
Terms of Service

© 2026 Virexa. All rights reserved.

Virexa

Home AI Programming Cloud Security Open Source Games Mobile Games Developer Hub

Sign In Sign Up

Search news, topics or sources

Search news, topics or sources

Sign In Sign Up

AI Programming Cloud Security Open Source Games Mobile Games Developer Hub

Virexa

Home AI Programming Cloud Security Open Source Games Mobile Games Developer Hub

Sign In Sign Up

Search news, topics or sources

Search news, topics or sources

Sign In Sign Up

AI Programming Cloud Security Open Source Games Mobile Games Developer Hub

Home›Security

Explore

Security

Security news, CVEs, vulnerabilities and industry advisories.

Filters

301 results • Page 3 of 26

Sort by

16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets

SecuritySecurity Advisory

16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets

Cybersecurity researchers have flagged a new typosquatting campaign targeting RubyGems users with a Windows-based information stealer. OpenSourceMalware, which discovered the activity on August 15, 2026, is tracking the threat under the moniker StubMaker. The complete list of packages published as part of the campaign is below - ubnuler ubnlder ri18nr reaker rakier orakw joxn

The Hacker News·August 18, 2026·1 min read

← Previous 1 2 3 4 5…26 Next →

🔥

Developer Pulse

What developers are discussing today

Zero-Day7.5K
OWASP4.8K
CVEs3.9K
Cloudflare3.2K
Bug Bounty2.1K

SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers

SecuritySecurity Advisory

SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers

SafePal has disclosed that an authorization flaw in an order-tracking plug-in exposed the names, email addresses, shipping addresses, phone numbers, and purchase details of approximately 39,798 customers. The hardware wallet maker said all affected customers were notified individually by email on August 16 from security@safepal.com, with the subject line "[Important] Your SafePal Order

The Hacker News·August 18, 2026·1 min read

CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

SecuritySecurity Advisory

CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Ray is an open-source, Python-native distributed computing framework designed to scale artificial intelligence and machine learning workloads. As of writing, the GitHub project has more than

The Hacker News·August 18, 2026·1 min read

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

SecuritySecurity Advisory

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user data. The flaw, tracked as CVE-2026-19478, has been rated Critical by GitLab and assigned a CVSS score of 9.4. Released on

The Hacker News·August 17, 2026·1 min read

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

SecuritySecurity Advisory

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to achieve arbitrary code execution on susceptible sites. The vulnerability, tracked as CVE-2026-15748, is rated 9.8 out of 10.0 on the CVSS scoring system. It was discovered and reported by a security researcher who goes by the online alias "

The Hacker News·August 17, 2026·1 min read

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

SecuritySecurity Advisory

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

Cybersecurity researchers have traced the continued evolution of the Cavern (aka Cav3rn) command-and-control (C2) framework used by Iranian nation-state hackers in attacks targeting entities in Israel. Russian cybersecurity company Kaspersky said its ongoing monitoring of the threat activity cluster since December 2025 has led to the discovery of previously unreported components that expand the

The Hacker News·August 17, 2026·1 min read

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

SecuritySecurity Advisory

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading farther than the original compromise. A lot of it came down to access that was already there and defenses that assumed nobody would look too closely. So, nothing magical. Just a

The Hacker News·August 17, 2026·1 min read

How MCP Servers Can Expose Enterprise Secrets

SecuritySecurity Advisory

How MCP Servers Can Expose Enterprise Secrets

MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned access and prompt injection, often before security teams even know the server is running. As more organizations adopt AI agents into their systems, that exposure can silently become a major gap in MCP server security. The Model Context Protocol (MCP) allows AI agents to reach the tools and data,

The Hacker News·August 17, 2026·1 min read

Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies

SecuritySecurity Advisory

Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies

Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1Bot that derives its core functionality from the Mirai botnet source code and is equipped to turn internet-facing devices into SOCKS proxies. "While the malware reuses the DDoS engine from the publicly leaked Mirai source code, it extends the original framework with numerous capabilities, including

The Hacker News·August 17, 2026·1 min read

Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware

SecuritySecurity Advisory

Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware

Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat (APT). The attacks involve the exploitation of CVE-2026-59310 (CVSS score: 9.8), a severe directory-traversal vulnerability in the VMware vCenter server that could be weaponized by a malicious actor to execute arbitrary code

The Hacker News·August 17, 2026·1 min read

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

SecuritySecurity Advisory

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts. The vulnerability, tracked as CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It relates to an instance of insufficient authorization checks and input validation. "SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit

The Hacker News·August 15, 2026·1 min read

Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner

SecuritySecurity Advisory

Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner

A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre (NCSC-NL) has warned. The vulnerability in question is CVE-2026-65400 (CVSS score: 9.8), a critical authentication issue impacting the Screen Sharing component that could allow an attacker already on the network to

The Hacker News·August 15, 2026·1 min read

Ransomware

↘1.7K

💬

Top Discussion

r/

r/netsec

“A critical zero-day is being actively exploited in the wild”

15.2K1,100 comments

View discussion→

Filters

Time

TodayLast 7 DaysLast 30 DaysLast 3 MonthsLast Year

Categories

TechnologyBusinessAIGamesMobile GamesWorldScienceSecurityStartupProgrammingMobileRoboticsSpace

Sources

Hacker News36Android Authority30BBC26Al Jazeera25Forbes25Unity Discussions22Google Developers20IGN20TechCrunch18Wired17The Hacker News13Polygon10

Content Type

NewsReleaseTutorialResearchSecurity AdvisoryCertificationOpen Source