Bleeping Computer

ChocoPoc malware delivered via trojanized exploits on GitHub

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

How I stopped a massive WordPress spam attack with 4,700 lines of code in two days - thanks to Codex and Claude

Spam accounts overwhelmed my database. Claude found the weaknesses, Codex wrote the fixes, and I deployed a new defense.
SecurityWeek

New Exploit Bypasses Apple’s Boot Defenses, Affects Millions of iPhones

European cybersecurity research firm Paradigm Shift has disclosed details of a new BootROM exploit that affects millions of iPhones and cannot be patched with a software update. Dubbed Usbliter8, the ...
Philadelphia Inquirer

Bucks County DA sues creators of Roblox, saying the game creates loopholes for predators to exploit kids

Bucks County District Attorney Joe Khan, saying parents are “outmatched” by social media companies in the fight for the online safety of their children, has filed a federal lawsuit against the makers ...
InfoQ

Copy Fail and Dirty Frag: Linux Page-Cache Exploits Target Every Major Distribution

Two Linux kernel local privilege escalation vulnerabilities have been publicly disclosed within a week of each other. Copy Fail (CVE-2026-31431), disclosed on 29 April 2026 by security firm Theori, ...
Bleeping Computer

New Linux 'Dirty Frag' zero-day gives root on all major distros

A new Linux zero-day exploit, named Dirty Frag, allows local attackers to gain root privileges on most major Linux distributions with a single command. Security researcher Hyunwoo Kim, who disclosed ...
GitHub

README.md

This document describes the Dirty Frag vulnerability class, first discovered and reported by Hyunwoo Kim (@v4bel), which can obtain root privileges on major Linux distributions by chaining the ...
Hosted on MSN

iOS 26.4.2 patches the web-based exploit chain Apple says is being used against iPhones in the wild

Apple released iOS 26.4.2 in late May 2026 to address a set of security vulnerabilities. The update patches multiple flaws, and Apple’s security advisory warns that at least some of the fixed issues ...
TechRepublic

The Prompt Engineering Cheat Sheet: How to Write Better AI Prompts

Learn prompt engineering with this practical cheat sheet that covers frameworks, techniques, and tips for producing more accurate and useful AI outputs. Every day, millions of people type something ...
VentureBeat

Three AI coding agents leaked secrets through a single prompt injection. One vendor's system card predicted it

A security researcher, working with colleagues at Johns Hopkins University, opened a GitHub pull request, typed a malicious instruction into the PR title, and watched Anthropic’s Claude Code Security ...
TechCrunch

Adobe fixes PDF zero-day security bug that hackers have exploited for months

Adobe has patched a vulnerability in its flagship document-reading apps, Acrobat DC, Reader DC and Acrobat 2024, that hackers have been actively exploiting for at least four months. The vulnerability, ...