The ShinyHunters extortion gang has breached education technology giant Instructure again, this time exploiting another ...
CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...
Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...
Mitiga researchers say attackers can silently redirect Claude Code MCP traffic, intercept OAuth tokens, and maintain persistent access to connected SaaS platforms. An OAuth token with wide access ...
Four npm packages linked to SAP's Cloud Application Programming Model were hijacked. The hackers added code that steals ...