-
Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs
Hackers have used a dodgy third-party ScreenConnect extension to push malware onto at least 288 machines across 48 organizations, prompting …
-
nDiligence Releases Four-Year Study Identifying a Critical Supply-Chain Vulnerability Across 50 Platform Types
Four-year cybersecurity study finds all 50 types of software and devices examined vulnerable, with 46 rated Critical or High risk. …
-
Certified for what? How to read a vendor’s ISO 27001 certificate
A certification doesn’t automatically apply to the whole company. The business chooses what goes in, whether that’s particular …
-
PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution
PTC has released patches for a new critical vulnerability impacting Windchill and FlexPLM software that, if successfully exploited, could …
-
Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign
Since mid-August 2026, a phishing operation has been stealing live Google sessions from corporate users. Every check defenders normally …
-
New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access
N-able on Thursday said it’s investigating a new public disclosure containing claims of additional vulnerabilities in on-premise versions …
-
Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them
Security teams have more alerts, logs, and monitoring tools than ever. Yet when an attack happens, one simple question can still take too …
-
Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs
Google Cloud VMs on AMD Turin chips need a guest OS patch and a stop-and-start to protect against three CPU side-channel flaws, Google said …
-
Security Teams Must Shift from Patching to Mitigation in the AI Era
Organizations “can’t patch their way out of AI” and should instead focus on mitigation post exploitation, according to Dick …
-
Why scammers want you to “allow notifications” on websites
A website asks you to click “Allow” to start a quiz or read an interesting story. A little later, your device starts warning you about …
-
Stolen Claude API keys can turn Claude Code into a remote-controlled implant
Darktrace researchers turned Claude Code into a remote-controlled implant in a lab test, steering the coding agent through the memory …
-
Microsoft Entra adds a seven-day safeguard against irreversible identity deletion
Microsoft Entra’s Hard Deletion Protection, now in preview, gives administrators a seven-day window to recover selected identities before …
●●●
NVD
- CVE-2026-126759 – A flaw has been found in H3C ICG2000 Unified Communication Gateway 2023. This issue …
- CVE-2026-125785 – Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) …
- CVE-2026-2982 – The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to …
- CVE-2026-125787 – Missing Authorization vulnerability in ExpressTech Quiz And Survey Master …
- CVE-2026-125786 – Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) …
EXPLOITS
- Ruflo MCP Bridge 3.16.2 – Remote Code Execution
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
SECURELIST
- Transcending the trust boundaries: how a cloud pentest works
- Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs lending a hand
- IT threat evolution in Q3 2026. Mobile statistics
- IT threat evolution in Q3 2026. Non-mobile statistics
- Virtualization security: attack layers and misconfiguration impact