Guru Baran

A leak of records covering more than 41,000 Department of Homeland Security employees and contractors has exposed contact details, work assignments, and links to sensitive operations, including undercover ICE work.

WordPress released version 7.1.4 on October 28, 2026, fixing 22 security flaws, including an unauthenticated remote code execution vulnerability in its update process.

Hackers combined PHP2Shell vulnerabilities with a Linux kernel exploit to gain root access on 25 servers across the United States, Japan, Taiwan, and South Korea, including three systems in a US government-affiliated environment.

A security researcher has published details of a zero-click Android flaw called "SMS of Death." One malformed text message can crash the phone service on an Android device, drop active calls, and in the worst case leave the phone without telephony after every restart.

Binance, the world’s largest cryptocurrency exchange, has suspended deposits and withdrawals while investigating a suspected security breach involving billions of dollars in digital assets.

Polymarket suffered a security incident on October 29, 2026, after a compromised third-party provider exposed users of its international platform to wallet theft.

An Accenture employee allegedly gave a personal Claude Code AI agent administrative access to a secure U.S. Department of Defense environment, allowing it to write and deploy code.

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by planting an SSH key, opening a reverse tunnel, and installing startup scripts.

Palo Alto Networks has confirmed that attackers are actively exploiting PHP2Shell vulnerabilities against PAN-OS management interfaces exposed to the internet.

Trezor has warned that a suspected hardware implant inside a Trezor Safe 5 could steal recovery phrases and send them over a mobile network.