A new phishing-as-a-service (PhaaS) platform dubbed “ARToken” appears to operate as an affiliate of the EvilTokens phishing platform, giving researchers a glimpse into an extensive toolkit designed to compromise Microsoft 365. […]

Anthropic says Claude Fable 5 won’t be accessible via Claude subscriptions after July 7, but it’s not a permanent change, and the company expects the model to return outside the usage-based plan soon. […]

Claude Fable, the company’s most powerful model, is now available to all users, but early impressions are disappointing, as it appears to be nowhere near the original release. […]

CVE ID :CVE-2024-58352 Published : July 2, 2026, 5:05 p.m. | 40 minutes ago Description :Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary Hibernate entity classes by injecting malicious HQL syntax into the uid

Learn MoreCVE-2024-58352 – Landray OA Unauthenticated HQL Injection via wechatLoginHelper.do

CVE ID :CVE-2022-50973 Published : July 2, 2026, 5:04 p.m. | 41 minutes ago Description :Yonyou KSOA 9.0 contains an unauthenticated arbitrary file upload vulnerability in the com.sksoft.bill.ImageUpload servlet that allows unauthenticated attackers to upload arbitrary files by submitting a POST

Learn MoreCVE-2022-50973 – Yonyou KSOA 9.0 Unauthenticated File Upload RCE via ImageUpload Servlet

CVE ID :CVE-2024-14037 Published : July 2, 2026, 5:03 p.m. | 41 minutes ago Description :Redsea Cloud eHR contains an arbitrary file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading malicious files through the PtFjk.mob servlet

Learn MoreCVE-2024-14037 – Redsea Cloud eHR Unauthenticated File Upload RCE via PtFjk.mob

CVE ID :CVE-2026-55950 Published : July 2, 2026, 4:06 p.m. | 1 hour, 38 minutes ago Description :Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl (dtls_packet_demux module) allows an unauthenticated remote attacker to crash all active DTLS sessions on a listener.

Learn MoreCVE-2026-55950 – DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions

CVE ID :CVE-2026-55952 Published : July 2, 2026, 4:06 p.m. | 1 hour, 39 minutes ago Description :The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension have

Learn MoreCVE-2026-55952 – TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension

CVE ID :CVE-2026-44935 Published : July 2, 2026, 4 p.m. | 1 hour, 45 minutes ago Description :Missing validation of “valuesFrom” references in Helm Deployer of SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15

Learn MoreCVE-2026-44935 – Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer

CVE ID :CVE-2026-44941 Published : July 2, 2026, 3:19 p.m. | 2 hours, 26 minutes ago Description :A relative path traversal in the “keyhint” option in repomd.xml parsing of libzypp before 17.38.12 can be used by attackers able to supply a malicious

Learn MoreCVE-2026-44941 – libzypp path traversal via “keyhint” in repomd.xml