Cybersecurity news from across the internet
Cybersecurity news from across the internet
A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere with security solutions…





Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
Infostealer riding the AI Train
EMudhra Intermediate CA Certificates Compromised
The Current Landscape of OAuth Attacks
(Reliable)? php2shell exploitability, (Fri, Oct 23rd)
PHP Vulnerability Wrap-Up, (Fri, Oct 23rd)
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
Suspicious Letters Containing White Powder Mailed to State and Local Election Officials, Media Organizations, and Public and Private Polling Companies
Critical Vulnerability Alert: PHP Core
Warning: Attackers Are Using Calendar Invite Files to Evade Security Filters
Resident Evil maker Capcom warns of phishing after 11.7 million records exposed