iOS 26 Security Update Warning—iOS 18 Silent Compromise Exploit Alert

Apple confirms hidden iOS 26 security update, and Google confirms silent iOS 18 spyware compromise. What you need to know and ...
CPO Magazine

Security Flaw at the U.K.’s Business Registry Exposes Organizations’ Data

A security flaw at the U.K.’s business registry, Companies House, exposed the personal information of business executives and ...

Someone has publicly leaked an exploit kit that can hack millions of iPhones

Leaked "DarkSword" exploits published to GitHub allow hackers and cybercriminals to target iPhone users running old versions ...
TidBITS

DarkSword Exploit Threatens iPhones Still Running iOS 18

Security researchers have discovered DarkSword, a sophisticated exploit chain targeting iOS 18.4 through 18.7.2. Unlike past spyware aimed at high-profile targets, DarkSword is being surreptitiously ...

Trivy vulnerability scanner breach pushed infostealer via GitHub Actions

The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...

Microsoft Confirms SQL Zero-Day Security Vulnerability—Here’s The Fix

Microsoft has confirmed that a hacker who successfully exploits a zero-day SQL vulnerability could gain system administrator privileges. Here’s how to fix it.
CPO Magazine

Infostealer Using New “DarkSword” iOS Exploit Chain Deployed by Russian Threat Actors

DarkSword packs both a complete iOS exploit chain and infostealer into one package. The chain initiates when Safari opens a ...
Windows Report

VoidStealer Malware Exploits Chrome Memory to Extract Encryption Keys

Chrome users face a new threat as VoidStealer 2.0 bypasses ABE protections and steals data during browser startup processes.
Crowdfund Insider

Movie Token Exploit Examined by Blockchain Security Firm CertiK

Blockchain security firm CertiK has released a detailed forensic breakdown of the March 10, 2026, exploit that drained roughly $242,000.
StateTech Magazine

Vulnerability Exploitability eXchange: Smarter Patching for State and Local IT Teams

VEX helps public-sector security teams prioritize repairs by identifying which vulnerabilities affect their systems.
TMCnet

RAVEN.IO Raises $20 Million to Prevent Cyberattacks as AI-Generated Exploits Make CVE-Based Security Obsolete

New approach to application security in production at 11 companies analyzes code behavior at runtime rather than relying on CVEs or external defenses. PALO ALTO, Calif., March 18, ...
SecurityWeek

Russian APT Exploits Zimbra Vulnerability Against Ukraine

Russia-linked APT28 has exploited a high-severity XSS vulnerability in Zimbra in attacks against Ukrainian entities.