Critical ZITADEL XSS Vulnerability Could Enable Full Account Takeover
A critical security vulnerability has been discovered in ZITADEL, an open-source identity and access management platform used by many organizations for authentication and access control. The vulnerability, tracked as CVE-2026-29191, [...]
OpenAI Codex Improves Automated Security Fixes
OpenAI has introduced Codex Security, a new AI-powered application security agent that helps developers automatically detect and fix vulnerabilities in code. Previously known as Aardvark, the tool is now available [...]
Apache ActiveMQ Vulnerability Enables DoS Attacks
Researchers have identified a security issue in Apache ActiveMQ, specifically related to the Apache ActiveMQ DoS vulnerability, a widely used open-source message broker that enables communication between applications. The vulnerability, [...]
WordPress Plugin Unauthenticated Admin Access Vulnerability Discovered
A critical WordPress plugin unauthenticated admin access vulnerability has been discovered in the User Registration & Membership plugin, allowing attackers to create administrator accounts. The vulnerability, tracked as CVE-2026-1492, affects [...]
ClickFix Malware Targets Crypto Experts via Fake LinkedIn VCs
Security researchers have uncovered a coordinated malware campaign targeting people working in the cryptocurrency and Web3 industry. Attackers pretend to be venture capital investors on LinkedIn and approach professionals with [...]
FHN 
