seen from Germany
seen from United Kingdom
seen from United States
seen from Bulgaria
seen from Australia
seen from United States
seen from United States
seen from Malaysia
seen from United States
seen from Netherlands
seen from United States
seen from Netherlands
seen from Thailand
seen from United States
seen from United Kingdom
seen from Brazil
seen from United States
seen from Malaysia
seen from Russia
seen from United States
Gogs Bug Lets Admins Delete Comments Across Repositories
A flaw in the Gogs Git service allowed repository administrators to bypass authorisation checks and remove comments from unrelated repositories using manipulated identifiers.
Source: Tenable
Read more: CyberSecBrief
Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch • No registration required • HD streaming
Dozen Hidden Flaws Found in OpenSSL
Researchers uncovered 12 previously unknown OpenSSL vulnerabilities, some buried in decades-old code, all fixed in a coordinated January release.
Source: AISLE
Read more: CyberSecBrief
Official EmEditor Installer Used to Spread Malware
A poisoned EmEditor download channelled stealthy data-stealing malware, showing how trusted software updates can become attack vectors.
Source: Trend Micro
Read more: CyberSecBrief
Fake GitHub Action Package Caught Stealing Build Tokens
A malicious npm package mimicking a GitHub Actions library secretly tried to steal build tokens from GitHub repositories, using obfuscated code and timed expiry to hide its activity.
Source: Veracode
Read more: CyberSecBrief
Node.js Fixes Eight Security Flaws Across Versions
Updates to Node.js patch high-severity issues affecting denial-of-service, permission bypasses, and sensitive memory exposure.
Source: Endor Labs
Read more: CyberSecBrief
Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch • No registration required • HD streaming
Open VSX Bug Lets Malicious Extensions Slip Through
A fail-open flaw in Open VSX allowed attackers to bypass extension scanning, letting malicious VS Code-compatible plugins go live until the fix on 11 February 2026.
Source: Koi Security
Read more: CyberSecBrief
Meet Aardvark — OpenAI’s AI Bug Hunter
OpenAI’s new agentic system, Aardvark, scans code like a tireless security researcher—finding, testing, and fixing vulnerabilities across live projects before attackers can exploit them.
Source: OpenAI
Read more: CyberSecBrief
