Skip to content
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

Ravie LakshmananJul 22, 2026Vulnerability / Browser Security Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a… 

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication

Ravie LakshmananJul 22, 2026Vulnerability / Web Security A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck. The vulnerability in question is CVE-2026-29059 (CVSS score: 7.5),… 

Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA

Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA

Swati KhandelwalJul 22, 2026Law Enforcement / Cybercrime German and US law enforcement have taken down the core infrastructure of Kratos, described by German investigators as one of the world’s most widely used criminal phishing kits,… 

Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library

Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library

Ravie LakshmananJul 22, 2026Supply Chain Attack / Malware Cybersecurity researchers have discovered a NuGet typosquat that’s unlike the typical information-stealing malware distributed via package registries: usual info-stealers: it’s designed to rig live game results on… 

OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark

OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark

Ravie LakshmananJul 22, 2026AI Security / Cloud Security OpenAI on Tuesday said a combination of its artificial intelligence (AI) models, including GPT-5.6 Sol and an “even more capable pre-release model,” was behind the security incident…