A private researcher posts proof-of-concept code for an unpatched code execution hole in RealPlayer and Helix Player.

Several AI coding assistants were tricked into facilitating developer machine hacking via an attack technique that has been ...

Suspected Chinese spies have been breaking into major US and Canadian universities since May, exploiting vulns in Roundcube mailservers to steal data belonging to physics and engineering ...

A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal ...

A critical vulnerability dubbed Januscape patched in the Linux kernel-based virtualization module poses arbitrary code execution risk to multi-tenant cloud environments and virtualized enterprise ...

Proofpoint says UNK_MassTraction exploited patched Roundcube flaws to target U.S. and Canadian university mail servers.

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.