Fortinet’s FortiClient endpoint management software, meant to harden corporate and government machines, instead exposed them ...
AI agent exploited Salesforce sites; 263 objects, 55 Apex methods exposed at one portal, leading to PII and file leaks.
A 22-year-old ethical hacker, Tirth Parmar, found critical vulnerabilities in CBSE's OSM portal, exposing data of 9.3 million students. He claims a skipped security audit left the portal open to hacks ...
thoropass-vuln-research-program / 2026 / SQL Injection in grit42 CSV Export Endpoint / README.md Cannot retrieve latest commit at this time.
Hackers can hijack ChatGPT, Claude, and Gemini with nothing but a sentence. OpenAI says the problem may never be fully solved.
Weekly ThreatsDay recap: old bugs, fake tools, shady payload tricks, AI mishaps, and the usual reminder that the internet is ...
A website called “UK visa portal” has been quietly collecting passport scans, selfies, and personal data from thousands of travellers who thought they were applying through official channels.
Our tracking of OceanLotus activities from 2024–2026 reveals a shift in operational focus. During this period, the Vietnam-aligned OceanLotus adopted a more selective approach to external operations ...
Other vulnerabilities: Drupal’s SQL injection (highly critical) and CISA’s recent advisories are here, including a number of new industrial control system vulnerabilities. Academic papers and reports ...