SparTech Software

A fake Anthropic preview campaign bypassed Proofpoint and Microsoft email defenses using trusted services, shortened links and CAPTCHA-gated credential theft.

A critical Linux kernel TCP race flaw rated CVSS 9.8 can enable remote root access on multipath TCP servers, prompting urgent patching.

US election systems retain exploitable voting-machine and ballot-privacy weaknesses, while AI deepfakes threaten public trust despite paper-ballot safeguards.

Anthropic says an unreleased Claude model built exploit chains across Chrome, Safari, Android, Windows and Linux, prompting vendor fixes.

Google’s Gemini 4 Carbon leads vulnerability-finding, exploit-validation and patching tests, but access begins with selected cyber defenders.

A leak tied to the hacktivist group Department of Peace exposes data on more than 41,000 DHS workers as the agency investigates a potential breach.

Cisco patches an actively exploited ASA and FTD VPN flaw that lets unauthenticated attackers remotely reload firewalls and cause denial of service.

Telegram patched an Android flaw that could let ordinary account holders execute code after a victim answered a voice call, researchers say.

The FBI seized Virtualine’s domain after officials linked the bulletproof host to CSAM, ransomware, sextortion, money laundering and cybercrime services.

An unpatched Windows 7 server exposed a factory network to EternalBlue, letting a penetration tester use a real admin password to seize control.