PackageGate
TRENDING TOPICS JAN 26, 2026 Update: PackageGate Highlights New Ways to Slip Past NPM Supply-Chain Safeguards Security researchers at Koi, are using the name “PackageGate” to describe six newly reported weaknesses in JavaScript package managers that can undermine two defenses many teams rely on after the 2025 npm supply-chain incidents:
K.G.B. RAT
TRENDING TOPICS DEC 04, 2025 K.G.B RAT Emerges on Dark Web with Stealth, Automation, and Built-In Evasion Tools A new remote access Trojan bundle called K.G.B RAT is being advertised on an underground cybercrime forum, where the seller claims it offers complete stealth, integrated evasion tools,
ChatGPT
CVE-2025-48539 High Android Operating System USE-AFTER-FREE A use-after-free flaw in acl_arbiter.cc (SendPacketToPeer) can trigger an out-of-bounds read, enabling remote or adjacent attackers to achieve code execution without requiring user interaction or elevated privileges on Android devices. Mitigation: Update to the latest Android patch level immediately and enable runtime
PyPI
TRENDING TOPICS SEPT 18, 2025 PyPI Tokens Revoked After GhostAction Supply Chain Attack The Python Software Foundation has confirmed that all PyPI publishing tokens stolen in early September's GhostAction supply chain attack have been invalidated, with no evidence that they were used to publish malicious packages. The incident
Microsoft OAuth
CVE-2025-5777 Critical Citrix NetScaler ADC/Gateway EXPLOITED IN WILD An out-of-bounds memory read vulnerability in NetScaler ADC and Gateway can expose sensitive data when used as a Gateway or AAA virtual server. This flaw has been actively targeted in the wild, making prompt remediation critical. Urgent Action Required: Citrix patched
Microsoft
TRENDING TOPICS MAY 12, 2025 Microsoft Copilot in SharePoint Exposes Sensitive Data Through AI Agent Exploits PentestPartners Security researchers have discovered multiple vulnerabilities in Microsoft’s Copilot for SharePoint, allowing attackers to access sensitive corporate data, including passwords, API keys, and confidential files. These AI-powered agents, automatically deployed with Microsoft