-
Best Parental Control Software for 2026
Best Parental Control Software (2024) Here’s a curated list of some of the best parental control software options available in 2024, …
-
Fake parcel delivery messages steal your card and bank details
Parcel delivery phishing campaigns appear around the world under different courier names. In the United States, the messages commonly …
-
Manufacturing Accounts for 22% of all Ransomware Victims
Manufacturing organizations made up over a fifth (22%) of all ransomware victims in the period from April 2025 to March 2026, according to …
-
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
Cybersecurity researchers have flagged a new Android malware called RatHat that’s assessed to be operated by China-based threat actors and …
-
Abandoned IoT apps keep sending sensitive data to broken servers
Millions of people still run smart home and IoT companion apps, the apps used to control devices like smart plugs, cameras, and …
-
Hardcoded MCP credentials found in public GitHub files
Hardcoded API keys, access tokens and other credentials used by AI coding tools have been found in publicly accessible MCP configuration …
-
How to read a VAPT report without panicking
I’ve watched the same movie play out too many times: a management team receives a penetration testing report, sees a wall of findings …
-
98% of fraudulent hires have company credentials by the time they’re caught
A 90-day period between hiring and onboarding is creating a blind spot in enterprise identity security, according to HYPR’s State of HR …
-
Most WordPress pros still lack a breach recovery plan
Melapress, a maker of WordPress security plugins, surveyed 319 WordPress professionals and found that most had dealt with at least one …
-
Comp AI raises $34m to turn compliance into continuous monitoring
“Security software shouldn’t just track the work. It should understand the business, perform the work, and act as risk changes,” said …
-
New infosec products of the week: September 18, 2026
Here’s a look at the most interesting products from the past week, featuring releases from Akuity, Bitsight, Cohesity, Dataminr, Nozomi …
-
USA’s Venezuela takeover comes with bonus exposure to Chinese AI surveillance tech
Think tank the Australian Strategic Policy Institute (ASPI) has warned that Venezuela is poised to adopt Chinese AI systems to enhance …
●●●
NVD
- CVE-2026-90392 – In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential …
- CVE-2026-89064 – The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Insufficient …
- CVE-2026-50603 – A vulnerability has been identified in the Acer Agent Service component included with …
- CVE-2026-92838 – A DLL hijacking vulnerability exists in the GeoVision GV-Remote …
- CVE-2026-81546 – The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform …
EXPLOITS
- CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth – ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
- Metabase 0.61.0 – Authenticated Remote Code Execution
- FreePBX 17.0.2 – Remote Code Execution (RCE)
- Ghost_CMS 6.19.0 – Remote Code Execution
- Bludit CMS 3.20.0 – Reflected Cross-Site Scripting
SECURELIST
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies
- Angry Birds: Toy Ghouls’ new toys
- Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa wit
- ValleyRAT masquerading as adware