Rowhammer attacks have been around since 2014, and mitigations are in place in most modern systems, but the team at gddr6.fail has found ways to apply the attack to current-generation GPUs.

David Hollingworth and Daniel Croft tackle the week’s stories that matter, from predictions of dire disruption to the banking ...

Now a security researcher says a Reader hole has been quietly exploited by malware for as long as four months, fingerprinting ...

Adobe Reader zero-day exploited since Dec 2025 via malicious PDFs, enabling data theft and potential RCE, prompting urgent ...

Hackers are exploiting a maximum-severity vulnerability, tracked as CVE-2025-59528, in the open-source platform Flowise for ...

Threat actors have started exploiting CVE-2025-59528, a critical Flowise vulnerability leading to remote code execution.

The Internet Bug Bounty program has paused new submissions, citing a massive expansion in vulnerability discovery by AI code ...

Hackers infiltrated Axios maintainers using fake Slack channels and Teams calls, then published infected packages.

Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.

In order to spread Vidar information-stealing malware, threat actors are taking advantage of the recent Claude Code source ...

The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...

Spread the loveAs digital interactions continue to evolve, the vulnerabilities within web browsers are becoming increasingly apparent, particularly in the context of social media usage. In 2026, ...