Flaws in Popular IDE Extensions Allow Data ExfiltrationInfosecurity Magazine·Feb 19, 10:45 UTC · Feb 19, 2026VulnerabilityCVE-2025-65717CVE-2025-65716CVE-2025-6571560
Systemic Flaw in MCP Protocol Could Expose 150 Million DownloadsInfosecurity Magazine·Apr 16, 09:40 UTC · Apr 16, 2026Vulnerability55
Zero-Click FreeScout Bug Enables Remote Code ExecutionInfosecurity Magazine·Mar 5, 11:00 UTC · Mar 5, 2026VulnerabilityCVE-2026-2763660
Over a Third of Grafana Instances Exposed to XSS FlawInfosecurity Magazine·Jun 16, 10:15 UTC · Jun 16, 2025VulnerabilityCVE-2025-412360
VS Code extensions with 125M+ installs expose users to cyberattacksSecurity Affairs·Feb 18, 15:14 UTC · Feb 18, 2026VulnerabilityCVE-2025-65715CVE-2025-65716CVE-2025-65717160
ChatGPT Leveraged to Enhance Software Supply Chain SecurityInfosecurity Magazine·May 18, 11:30 UTC · May 18, 2023Vulnerability55
AI writes code like a junior dev, and security is feeling itHelp Net Security·Oct 27, 00:00 UTC · Oct 27, 2025Vulnerability30
Miasma Supply Chain Attack Compromises Red Hat npm Packages with CredentialThe Hacker News·Jun 2, 08:55 UTC · Jun 2, 2026Vulnerability42
Chinese DeepSeek-R1 AI Generates Insecure Code When Prompts Mention Tibet or UyghursThe Hacker News·Nov 24, 11:08 UTC · Nov 24, 2025Vulnerability55
OSC&R open software supply chain attack framework now on GitHubHelp Net Security·Mar 31, 00:00 UTC · Mar 31, 2023Vulnerability42
Critical Flaws Found in Four VS Code Extensions with Over 125 Million InstallsThe Hacker News·Feb 18, 13:16 UTC · Feb 18, 2026VulnerabilityCVE-2025-65717CVE-2025-65716CVE-2025-65715160
MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation WorldwideThe Hacker News·Dec 30, 07:59 UTC · Dec 30, 2025Vulnerability in the wildCVE-2025-1484760
FreeScout vulnerability enables unauthenticated, zero-click RCE via email (CVE-2026-28289)Help Net Security·Mar 5, 00:00 UTC · Mar 5, 2026VulnerabilityCVE-2026-28289CVE-2026-2763647
Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply ChainThe Hacker News·Apr 22, 05:41 UTC · Apr 22, 2026VulnerabilityCVE-2025-65720CVE-2026-30623CVE-2026-30624+12 CVEs60
ThreatsDay Bulletin: DDR5 Bot Scalping, Samsung TV Tracking, Reddit Privacy Fine & MoreThe Hacker News·Mar 5, 13:50 UTC · Mar 5, 2026Vulnerability42
Week in review: Tips for starting your cybersecurity career, Patch Tuesday forecastHelp Net Security·Aug 11, 00:00 UTC · Aug 11, 2024VulnerabilityCVE-2024-42219CVE-2024-42218CVE-2024-38856+2 CVEs160
Analysis of 216M Security Findings Shows a 4x Increase In Critical Risk (2026 Report)The Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability55
Cybersecurity jobs available right now: July 1, 2025Help Net Security·Sep 5, 10:17 UTC · Sep 5, 2025Vulnerability30
Week in review: Probing activity on Palo Alto Networks GlobalProtect portals, Patch Tuesday forecastHelp Net Security·Apr 6, 00:00 UTC · Apr 6, 2025Vulnerability in the wildCVE-2025-22457CVE-2024-20439CVE-2025-2825+1 CVEs60
OpenClaw Integrates VirusTotal Scanning to Detect Malicious ClawHub SkillsThe Hacker News·Feb 9, 07:27 UTC · Feb 9, 2026Vulnerability55
Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code ExecutionThe Hacker News·Dec 4, 15:38 UTC · Dec 4, 2025VulnerabilityCVE-2025-55182CVE-2025-6647860
What Changes When Your Software Supply Chain Includes AI Writing Your Code?The Hacker News·Jul 7, 11:30 UTC · Jul 7, 2026Vulnerability42
Threat Roundup for October 11 to October 18Cisco Talos·Oct 18, 16:44 UTC · Oct 18, 2019Vulnerability130