A routine pip install litellm by a developer has raised a serious security concern, causing a system compromise.  Versions 1.82.7 and 1.82.8 of the popular Python package started acting like aggressive credential harvesters, stealing sensitive data from devices.   Post installation,…

CVE-2026-24291, a newly disclosed privilege escalation vulnerability known as RegPwn, has drawn sharp attention from security experts worldwide. The root cause of this vulnerability is Incorrect Permission Assignment within the Windows Accessibility environment.  It could cause a full system compromise…

A critical vulnerability in React Server Components (RSC) has triggered an urgent security push across the web development ecosystem.  The vulnerability known as CVE-2025-55182 with the CVSS score of 10, enables hackers to run a script on a server through…

In the latest data breach incident, Coupang, a prominent South Korean Retailer,  has acknowledged a massive data breach that exposed the personal information of 33.7 million customers in South Korea over a period of five months. This incident first came…

The government has finally confirmed that seven major Indian airports, including Delhi, Mumbai, Kolkata, Hyderabad, and Bengaluru, faced  coordinated cyberattacks that involved GPS spoofing.  GPS spoofing refers to manipulating aircraft navigation by transmitting false coordinates, posing a serious risk to…

Over the weekend, Anthropic released a report in which it claimed a Chinese state-sponsored group used its own Claude AI tool to automate key parts of an operation aimed at stealing sensitive information from roughly 30 organisations. The disclosure has…

Security researchers have identified a set of malicious npm packages that were quietly stealing credentials, tokens, and browser data from all major operating systems, including Windows, macOS, and Linux.   These packages were uploaded to npm on July 4 and managed to…

Hackers have exploited a zero-day vulnerability in Oracle E-Business Suite (EBS) as part of a large-scale extortion campaign linked to the Clop ransomware group, according to Google’s Threat Intelligence Group (GTIG). The campaign began on September 29, 2025, when threat…