First Light Update 1.3.0 adds New Game Plus, Photo Mode, 00 difficulty, new TacSim content, and over 700 fixes and ...

A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the highest level of access on a machine. Kernel maintainers have fixed all ...

The creators of military shooter Wardogs have announced that they will crack down heavily on players who use exploits and bugs to speedily farm in-game currency and XP, or who spend “more than a few ...

Key Takeaways by nexos.ai, reviewed by Cybernews staff. The latest flagships from Samsung, Xiaomi, Oppo, and OnePlus – all running the latest security updates – fell to an unprivileged app. And it’s ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are now exploiting a maximum-severity GitLab vulnerability in attacks. GitLab's DevSecOps platform is used by over ...

Anatomy of CVE-2026-60004: exploiting Gitea’s patch workflow During routine threat hunting, Acronis Threat Research Unit (TRU) identified a Linux implant, which we track as JITTERLY, and traced it to ...

Multiple espionage-motivated threat actors have adopted BlueMoon in opportunistic, rushed deployments. Multiple espionage groups have been using a new exploit kit dubbed BlueMoon in seemingly ...

BlueMoon exploit kit chains Windows and Chrome zero-days in targeted attacks, giving cyber-espionage groups a way to execute code, escape Chrome’s sandbox, and gain elevated Windows privileges.

BlueMoon, a shared Chrome and Windows exploit kit, shows why “patch later” is becoming a dangerous gamble. Security updates are easy to put off. The browser still opens, Windows still works, and ...

On the heels of a record-breaking Patch Tuesday, the disgruntled security researcher known as Nightmare-Eclipse dropped yet another Windows zero-day exploit, which enables privilege escalation and ...

Multiple state-aligned hacking groups have adopted a new exploit kit that can compromise Google Chrome users even when they run the latest stable browser version available at the time of the attack.