Security news.
Today's security landscape is dominated by critical AI-related vulnerabilities, active zero-day exploitation, and supply chain attacks. A Palo Alto Networks firewall zero-day has been exploited for nearly a month, while multiple AI code execution risks and malware delivery campaigns are actively targeting developers an
Palo Alto Networks PAN-OS Zero-Day Exploited for Nearly a Month
State-sponsored hackers have been actively exploiting a critical-severity PAN-OS firewall vulnerability since April 9, affecting enterprises globally.
CISA Adds PAN-OS CVE-2026-0300 to Known Exploited Vulnerabilities Catalog
CVE-2026-0300 (Palo Alto Networks PAN-OS Out-of-bounds Write) has been added to CISA's KEV catalog based on evidence of active exploitation.
'TrustFall' Exposes Claude Code Execution Risk
Researchers discovered that malicious repositories can trigger code execution in Claude Code with minimal or no user interaction, posing significant risks to developers.
Fake Claude AI Website Delivers 'Beagle' Windows Malware
A malicious Claude-Pro Relay download from a counterfeit Claude website delivers a previously undocumented Windows backdoor named Beagle.
PyPI Packages Deliver ZiChatBot Malware on Windows and Linux
Three malicious packages on the Python Package Index covertly deliver ZiChatBot, a previously unknown malware family targeting both Windows and Linux systems.
Critical vm2 Node.js Sandbox Escape Vulnerabilities Disclosed
A dozen critical vulnerabilities in the vm2 library enable attackers to break out of the JavaScript sandbox and execute arbitrary code on host systems.
Cisco Patches High-Severity Vulnerabilities in Enterprise Products
Cisco released patches for multiple high-severity flaws that could lead to code execution, SSRF attacks, and denial-of-service conditions.
MuddyWater Uses False Flag Ransomware Attack with Microsoft Teams Social Engineering
The Iranian state-sponsored group MuddyWater disguised operations as a Chaos ransomware attack while using Teams-based social engineering to steal credentials and establish persistence.