-
PSA: Patch your Plex media server before someone hacks it
Recently fixed vulnerabilities in the Plex Media Server are under active exploitation in attacks that, when successful, install malware, …
-
Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline
Dutch grocery giant Ahold Delhaize, which operates US supermarket chains Food Lion, Giant Food, and Stop & Shop, said it proactively took …
-
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy …
-
Security patches need patches now that attackers have AI
Updating your software only gets you so far. A scary scenario – security fixes themselves being bypassed – is becoming more common, …
-
Hackers Exploit Plex Flaws To Turn Media Servers Into Zombie PCs, Update ASAP
Plex users received an urgent security warning two months ago that urged them to update to the latest version of the self-hosted media …
-
Keep less, know more: the AI advantage hiding in your data estate
The Security Think Tank explores the intersection of GDPR and artificial intelligence, considering how data protection standards in the UK …
-
Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as …
-
Anthropic Gives METR Team “Employee-Like Access”
Darin Fredde, Sr. Director of Technical Marketing Engineering, Ridge …
-
WhatsApp Help Pages Leaked Hidden Instructions for a Meta Chatbot
Around 80 pages on WhatsApp’s website exposed instructions that were designed for its chatbot, including “WHAT NOT TO SAY.” Meta says …
-
GenAI Security Gateway: An End-to-End Architecture
LLMs are powerful application components, but they should not be exposed directly to untrusted users or unvetted documents. A request can …
-
Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds
AI-Driven Attacks Threaten to Widen the Patching Gap The Moody’s report also warned that AI agents are already capable of exploiting …
●●●
NVD
- CVE-2026-112032 – A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the …
- CVE-2026-112033 – A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected …
- CVE-2026-112030 – A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects …
- CVE-2026-6930 – IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that …
- CVE-2026-112031 – A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies