Skip to content
Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

Swati KhandelwalSep 23, 2026Vulnerability / Web Security A new security vulnerability in Next.js could allow attackers to run code on a server via ImageResponse, the feature that generates Open Graph and other social preview images, Vercel… 

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

Ravie LakshmananSep 23, 2026Data Breach / Cybercrime The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal Bureau of Investigation and stolen data belonging to current and former employees… 

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Swati KhandelwalSep 22, 2026Network Security / Vulnerability Attackers exploited a previously unknown flaw in Check Point’s Security Management Server in a handful of targeted attacks on July 23, the company said. The flaw, CVE-2026-93616, allows an… 

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

Swati KhandelwalSep 22, 2026Vulnerability / Web Security WordPress has fixed a critical flaw in its core software that lets an attacker with no account make a site load a PHP file from outside its theme… 

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Ravie LakshmananSep 22, 2026Supply Chain Attack / Malware Cybersecurity researchers have disclosed details of a malicious npm package named “tw-pkgprobe-7731” that masquerades as a security tool targeting developers integrating Twilio into their applications, while stealthily…