Exploit released for new PinTheft Arch Linux root escalation flaw By Sergiu Gatlan May 20, 2026 06:52 AM A recently patched Linux privilege escalation vulnerability now has a publicly available proof…
…Microsoft explained, they can also be released from containment at any time by security operators after completing the incident investigation and mitigating the risks. To release a device from automatic isolation, select…
…and that it's still working on releasing patches, with the first ones expected to roll out next Wednesday, May 13. Until security updates are available, the company "strongly" advised customers to…
VS Code zero-day lets hackers steal GitHub tokens in one click By Sergiu Gatlan June 3, 2026 02:50 AM A security researcher has released exploit code for a Visual Studio…
…Ivanti on Tuesday with the release of Sentry versions R10.5.2, R10.6.2, and R10.7.1. While the company said at the time that it had no evidence of…
…This critical severity argument injection security flaw has yet to be assigned a CVE ID, affects the latest release versions (Gogs 0.14.2 and 0.15.0+dev), and can only…
…cybersecurity company publicly disclosed it following a lack of response to multiple status updates, the Gogs maintainers released version 0.14.3 on June 7 to patch this flaw and requested a…
…Instead of sending a response, the server periodically sends tiny WINDOW_UPDATE frames to avoid timeouts. In this scenario, the requests are never fully completed, and the allocated memory keeps growing without…
…When BleepingComputer reached out for more details on the attack, a Novo Nordisk spokesperson referred us back to the company's press release. Update June 12, 06:28 EDT: Added Novo Nordisk…
…In the long term, to mitigate the risk from similar attacks, consider enforcing lockfile-only installs, which should prevent auto/silent package updates. UPDATE [08:36 EST]: Added information from Microsoft Threat…