Three of the four vulnerabilities remained unpatched months after OX Security reported them to the maintainers.
A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...
MuddyWater’s Operation Olalampo targets MENA with GhostFetch, CHAR, HTTP_VIP, and AI-assisted malware since Jan 26, 2026.
Ecommerce stores juggle product pages, checkout flows, customer accounts, inventory systems, payment processors and third-party plugins. That complexity ...