-
From AI endpoints to IAM: 5 cybersecurity CEOs we’ve been watching this summer
Cybersecurity has had no shortage of new companies and ideas this summer. Behind some of the most interesting developments are founders …
-
Best Security Awareness Platforms for Personalized Employee Training
The need for effective security awareness training is only growing more intense. Often powered by AI, today’s phishing attacks are more …
-
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code execution are …
-
Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Know what was tested before your SAP …
-
‘Mum, where did my Robux go?’ The Roblox scam targeting children
Your 10-year-old son has started playing Roblox, when he realises all of his in-game currency, Robux, is gone. When you try to find out …
-
How to Tell Whether a Free VPN Is Safe
A free VPN can be a reasonable choice for occasional browsing, but the word free tells you very little about the company handling your …
-
OpenAI halts training of latest models as reports mount of AI agents going rogue
OpenAI said it has paused training of its latest artificial intelligence models as reports of AI agents going rogue mount. The decision to …
-
CVE-2026-96279 – A malicious OCI registry can hardlink arbitrary host files into the extraction directory …
A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates a Flatpak …
-
CVE-2026-100876 – A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to …
A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown …
-
CVE-2026-100875 – A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to …
A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an …
-
CVE-2026-100874 – A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to …
A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown …
-
CVE-2026-100873 – A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to …
A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted …
●●●
NVD
- CVE-2026-96279 – A malicious OCI registry can hardlink arbitrary host files into the extraction directory …
- CVE-2025-71423 – Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions …
- CVE-2025-71424 – Contrast, Edgeless Systems’ runtime for confidential containers on Kubernetes, is …
- CVE-2025-71422 – Contrast is a Kubernetes runtime for confidential containers. In versions before 1.12.1, …
- CVE-2026-100740 – A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function …
EXPLOITS
- CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth – ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
- Metabase 0.61.0 – Authenticated Remote Code Execution
- FreePBX 17.0.2 – Remote Code Execution (RCE)
- Ghost_CMS 6.19.0 – Remote Code Execution
- Bludit CMS 3.20.0 – Reflected Cross-Site Scripting
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies