Recent Advisories

Severity ID Title Vendor Product Date Type
NONE WIRED:D9BFF18DB...

Websites Can Now Spy on You Through Your Hard Drive_WIRED:D9BFF18DBFF2B496ED6200A86EB58EDE

Thanks to the newly detailed FROST technique, telltale SSD activity can be measured in the browser using simple JavaScript.

N/A N/A WIRED
NONE MALWAREBYTES:FB...

Your phone called. It needs a cleanup._MALWAREBYTES:FB5998CE4E523453088F02D0B7DB548D

Does it sometimes take your phone a few minutes to accomplish one simple task? That can be wildly frustrating. But you’re in luck, because we’ve ...

N/A N/A MALWAREBYTES
NONE THN:A3C1407F6B7...

OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack_THN:A3C1407F6B73903A16A1CC760DF748AC

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4veBAmEJHF2nXN_nIgXeWxVSxlTDBc6uWiLwVCYNUqGMF9ZtPre3zF_CXmGnAxX2rbqfwgm_Au0tXvYwv1o...

N/A N/A THN
HIGH 9.3 SECURELIST:6D82...

Containers on fire: from container escapes to supply chain attacks_SECURELIST:6D82E0A3BCBF47ABAB2827F98F7A1755

![](https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/06/01080842/container-attacks-featured-image-scaled-1-990x400.jpg) ## I...

N/A N/A SECURELIST
CRITICAL 9.8 THN:0ACE1F8B00A...

Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts_THN:0ACE1F8B00AC011E78CEF054F3071566

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhR5AZVDVlhPdPOYO4FsyfLsBmtohzgdjmh688BLU6VRpwi-MaKq4XYgE5-ygnQtcUDMKcR8R4-f9IrfiSFpC...

N/A N/A THN
NONE MALWAREBYTES:6A...

A week in security (May 25 – May 31)_MALWAREBYTES:6A9909117A40839DDF1FB9CA7FEAD1BA

Last week on Malwarebytes Labs: * Payment apps are watching what you say (Lock and Code S07E11) * Scammers pretending to be Microsoft had help...

N/A N/A MALWAREBYTES
NONE MALWAREBYTES:C7...

Payment apps are watching what you say (Lock and Code S07E11)_MALWAREBYTES:C7ED59B949BA4151B85162D066563424

_This week on the Lock and Code podcast …_ In the United States today, you can have your bank account closed, your credit cards cancelled, and you...

N/A N/A MALWAREBYTES
NONE H1:3769293

curl: Low priority HSTS bypass in curl_easy_duphandle()_H1:3769293

## Summary: curl_easy_duphandle() creates a fresh HSTS store for the cloned handle and populates it from the configured files and callbacks, but n...

N/A N/A HACKERONE
NONE HACKREAD:4D8CE6...

27,000-Download Codex UI Tool Secretly Stole OpenAI Refresh Tokens_HACKREAD:4D8CE66CA7D4D8C25A00C5F9D69F75A9

A malicious Codex UI npm package with 27,000 weekly downloads was caught exfiltrating OpenAI refresh tokens, exposing developers to account takeove...

N/A N/A HACKREAD
NONE THN:CCBAEA4196D...

Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices_THN:CCBAEA4196DBC082BB67891C52B61960

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiU44Ejz__EFKfpIrEypTxhK3KW7XV3oiEIJEWAC-_PyhbhUvOZzmv3SCAmiuGZdFNdzYIDR2GLwOAhX9nIaA...

N/A N/A THN