New NGINX Zero-Day RCE Vulnerability Threatens Millions of Web Servers
Security researchers discovered a critical nginx zero day vulnerability that grants attackers remote code execution access to millions of servers.
Secure.com News
Stay updated with the latest cybersecurity news, threat intelligence, and industry updates from secure.com.
Browse by Category
GitHub Loses 3,800 Internal Repos to a Single Poisoned VS Code Extension
A poisoned plugin slipped past one of the most security-conscious companies on the internet, and the GitHub VS Code extension breach now puts every developer endpoint...
Hackers Abuse Microsoft Entra ID Accounts to Steal Corporate Cloud Data
The Storm-2949 threat group executed a complex Microsoft Entra ID attack to steal sensitive data from corporate cloud environments.
Mini Shai-Hulud Strikes Again: 314 @antv npm Packages Hijacked in 22-Minute Burst
A fresh npm supply chain attack tied to the Mini Shai-Hulud worm has poisoned hundreds of @antv packages, putting developer credentials at risk.
Microsoft Confirms Windows 11 Update Fails With Error 0x800f0922
Microsoft has officially confirmed that its May 2026 Patch Tuesday update for Windows 11 is failing with error code 0x800f0922.
Four Malicious npm Packages Steal SSH Keys, Cloud Credentials, and Crypto Wallets
Security researchers discovered four malicious npm packages designed to steal SSH keys, cloud credentials, and cryptocurrency wallets from developers.
Grafana Tells Extortionists to Get Lost After GitHub Token Breach Exposes Codebase
The Grafana GitHub token breach saw attackers steal a privileged token, exfiltrate the codebase, and try to extort the company. Grafana said no.
OpenAI Confirms Breach After TanStack npm Supply Chain Attack Hit Two Employee Devices
The TanStack npm supply chain attack reached OpenAI's internal repositories. Here is the full picture of what actually happened.
NGINX Was Hiding a Critical Bug for 18 Years. An AI Just Found It.
A newly disclosed NGINX vulnerability lay dormant in the codebase for 18 years before an AI system pulled it into daylight.
The SailPoint Lesson: Why Identity Infrastructure Remains the Weakest Link in Supply Chain Security
The SailPoint GitHub breach exposes how supply chain security and identity infrastructure remain the softest targets in enterprise defense.
Hackers Abuse Google Ads and Claude.ai Shared Chats to Target Mac Users
A new macOS malware campaign exploits Google Ads and Claude.ai shared chat features to distribute malicious software through fake AI applications.
New Linux PamDOORa Backdoor Uses PAM Modules to Steal SSH Credentials
Cybersecurity researchers have discovered PamDOORa Linux backdoor being sold on Russian cybercrime forums for $1,600.