-
Updated ToxicPanda Variant Targets 140+ Banking and Crypto Apps
Security researchers have warned of a new variant of a prolific Android banking Trojan which substantially expands its potential victim …
-
These 2 WFH items are a splurge – but I’d highly recommend them
Follow ZDNET: Add us as a preferred source on …
-
How to use your TV as a PC monitor in 3 simple steps (and without buying anything)
Computer monitors can come with some pretty steep price tags, especially if you’re in the market for a specialized screen for PC gaming or …
-
OpenAI previews privacy-focused system for detecting AI misuse
OpenAI is previewing Private Safety Processing with early customers seeking greater certainty about how their data will be protected as AI …
-
Def Con Attendees Targeted by Persistent Phishing Campaign
Attendees of cybersecurity conferences should be on the lookout for malicious outreach following the event, according to a new Huntress …
-
US agencies warn of AI-powered attacks on Siemens industrial controllers
Threat actors are using AI to write exploit scripts targeting internet-exposed Siemens S7 Series programmable logic controllers (PLCs) used …
-
Singapore Polytechnic launches CASTLE to help SMEs strengthen cyber defences
For many small businesses in Southeast Asia, cybersecurity still sits in an uncomfortable place: too important to ignore, but too costly …
-
Tufin expands Unified Control Plane with AI intelligence and multi-vendor automation
Tufin has announced the availability of Tufin Orchestration Suite (TOS) 5.3, helping enterprises further simplify security operations and …
-
Why Every NFL Stadium Is Now a Cybersecurity Operation
An NFL stadium used to be judged by its sightlines, seating capacity, turf, concessions, and atmosphere. Today, it is also judged by …
-
US charges 17 Iranian hackers over 31-terabyte academic data theft
The U.S. has charged 17 alleged members of Mabna Institute, an Iranian hacking-for-hire company accused of running a years-long campaign …
-
AI agent suggested installing a malware package. Engineer almost took its advice
Welcome back to PWNED, the column where we make fun of those who are security self-owned, so hopefully you don’t do the same. This week, …
-
Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code
Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully exploited, …
●●●
NVD
- CVE-2026-75081 – A vulnerability was detected in Webkul Bagisto up to 2.4.4. Impacted is an unknown …
- CVE-2026-75082 – A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown …
- CVE-2026-75079 – A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. …
- CVE-2026-52854 – Maps is a MediaWiki extension that enables visualization of geographic data through …
- CVE-2026-75080 – A security vulnerability has been detected in SourceCodester Class and Exam Timetabling …
EXPLOITS
- PCMan 2.0.7 – Buffer Overflow
- flyto-core 2.26.7 – Arbitrary File Write
- Nodemailer 9.0.0 – File Read/ SSRF
- NanaZip 6.5 – DoS
- Linuxfabrik monitoring_plugins_6.0.0 – SSRF
SECURELIST
- APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit
- Armored Likho expands its cyber-espionage toolkit
- Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver Pha
- Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selectio
- IT threat evolution in Q2 2026. Mobile statistics