seen from Malaysia
seen from Germany
seen from Singapore
seen from United States
seen from United States
seen from France
seen from Netherlands
seen from T1
seen from United States
seen from Malaysia
seen from United States
seen from T1
seen from United States
seen from United States
seen from China
seen from Türkiye
seen from Singapore
seen from New Zealand
seen from Singapore
seen from China
Gogs Bug Lets Admins Delete Comments Across Repositories
A flaw in the Gogs Git service allowed repository administrators to bypass authorisation checks and remove comments from unrelated repositories using manipulated identifiers.
Source: Tenable
Read more: CyberSecBrief
Dozen Hidden Flaws Found in OpenSSL
Researchers uncovered 12 previously unknown OpenSSL vulnerabilities, some buried in decades-old code, all fixed in a coordinated January release.
Source: AISLE
Read more: CyberSecBrief
Official EmEditor Installer Used to Spread Malware
A poisoned EmEditor download channelled stealthy data-stealing malware, showing how trusted software updates can become attack vectors.
Source: Trend Micro
Read more: CyberSecBrief
Fake GitHub Action Package Caught Stealing Build Tokens
A malicious npm package mimicking a GitHub Actions library secretly tried to steal build tokens from GitHub repositories, using obfuscated code and timed expiry to hide its activity.
Source: Veracode
Read more: CyberSecBrief
Node.js Fixes Eight Security Flaws Across Versions
Updates to Node.js patch high-severity issues affecting denial-of-service, permission bypasses, and sensitive memory exposure.
Source: Endor Labs
Read more: CyberSecBrief
Open VSX Bug Lets Malicious Extensions Slip Through
A fail-open flaw in Open VSX allowed attackers to bypass extension scanning, letting malicious VS Code-compatible plugins go live until the fix on 11 February 2026.
Source: Koi Security
Read more: CyberSecBrief
Meet Aardvark — OpenAI’s AI Bug Hunter
OpenAI’s new agentic system, Aardvark, scans code like a tireless security researcher—finding, testing, and fixing vulnerabilities across live projects before attackers can exploit them.
Source: OpenAI
Read more: CyberSecBrief
