-
Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
Kaspersky researchers analyze a complex targeted attack employing NetamLoader, a sophisticated malicious framework and targeting a …
-
Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against …
-
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its …
-
Qualys CISO on what security teams can do as exploit campaigns grow
In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of …
-
IT bosses are confident they’ve found the certificates they don’t know about
Forty percent of 500 senior IT and security leaders surveyed for certificate authority Sectigo said they are very prepared for monthly TLS …
-
Shame and sleepless nights haunt scam victims long after the money is gone
Scams and identity theft hurt people in different ways, and recovering involves much more than getting money back, according to ITRC’s …
-
Stolen staff logins are spreading attacks between K-12 school districts
Last school year, 808 K-12 school organizations got some unwelcome news. The Multi-State Information Sharing and Analysis Center (MS-ISAC) …
-
Bluesky Is Blocking Links to a Major Leak of DHS Employee Records
Bluesky tells WIRED it blocked links to a leaked archive of information on 41,000 ICE, CBP, and other DHS workers because it contains …
-
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to …
-
Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice
All right, well, we won’t keep you for too much longer than we need you, but we are gonna need you for the next 45 minutes or so as we look …
-
What would happen if the internet went down?
For many, the internet is feeling less secure these days, thanks to generative artificial intelligence (AI) tools making it easier than …
-
Transferring Unused IPv4 Addresses in Asia Pacific: The Complete APNIC Playbook
If your network needs more IPv4 space in the Asia Pacific region, the transfer market is now the main way to get it. Asia Pacific Network …
●●●
NVD
- CVE-2026-118589 – A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown …
- CVE-2026-113957 – An attacker who controls the registry, a mirror, or the network path to it may be able to …
- CVE-2026-118585 – A vulnerability was identified in configuroweb inventariobasico …
- CVE-2026-118030 – A flaw was found in the HOTP authentication mechanism of the keycloak-services component, …
- CVE-2026-118586 – A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects …
EXPLOITS
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
- Synametrics Syncrify 6.2 – command execution
SECURELIST
- Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
- Millions of security cameras at risk: DoS vulnerability in Intelbras devices
- An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infras
- Deploying AI agents securely: how Kaspersky products mitigate AI threats
- How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asi