-
5G-Shark Lures Phones to Rogue 5G Cells Without Network Jamming
Researchers have developed 5G-Shark to lure phones onto rogue base stations, collect subscriber IDs, force network downgrades and trigger …
-
Expecting cyber attack, Kiteworks tells users to turn off servers
An as-yet undisclosed zero-day vulnerability has prompted managed file transfer provider Kiteworks to tell users to preemptively switch off …
-
Investigative journalist seeks damages from police over unlawful phone surveillance
…
-
Fake Google Security Team ad says ‘no script reading’ in voice phishing – then prints the script
Yes, criminals have job listings too. A Telegram user recruiting callers to work in an apparent Google Security Team voice-phishing scam …
-
Discord Wants to Estimate Your Age Without Asking for ID
Discord is rolling out machine-learning age assurance that estimates whether users are teens or adults without requiring most accounts to …
-
Attackers Target Unpatched Roundcube Servers With CVE-2026-48842
Attackers are exploiting CVE-2026-48842 against unpatched Roundcube servers months after a fix was released, raising urgency for …
-
ShinyHunters tells The Reg: We hacked the FBI to ‘protect our business’
ShinyHunters, the data theft and extortion crew that has stolen sensitive information belonging to millions of cancer patients, university …
-
Crooks use fake desktop apps to fool HR staff into giving them remote access
You work in your company’s human resources department and use HR software to check employee information, benefits, and payroll. So, when …
-
Oktoberfest Ride Strikes, Kills Security Guard
at the renowned beer festival in Munich, Germany, when a descending carriage of the “Hangover” ride collided with him around 9:50 p.m. …
-
Bitget blames North Korea for $387.5M crypto wallet raid
The CEO of crypto exchange Bitget has confirmed that a cyberattack with all the hallmarks of a North Korean operation resulted in …
-
WordPress Flaw Under Active Attack: Hackers Target CVE-2026-87902 for Code Execution
Hackers are actively exploiting CVE-2026-87902, a critical WordPress flaw that can lead to remote code execution. Here’s what admins …
-
Google Chrome 154 Fixes 108 Security Flaws: 11 Are Rated Critical
Google Chrome 154 fixes 108 security vulnerabilities, including 11 Critical flaws. Here’s what users and IT teams should do …
●●●
NVD
- CVE-2026-85082 – Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an …
- CVE-2026-98041 – In the Linux kernel, the following vulnerability has been resolved: bpf: Don’t predict …
- CVE-2026-53493 – containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, …
- CVE-2026-84283 – Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted …
- CVE-2026-85417 – Incomplete property masking in the SANnav logging subsystem permits SNMP authentication …
EXPLOITS
- CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth – ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
- Metabase 0.61.0 – Authenticated Remote Code Execution
- FreePBX 17.0.2 – Remote Code Execution (RCE)
- Ghost_CMS 6.19.0 – Remote Code Execution
- Bludit CMS 3.20.0 – Reflected Cross-Site Scripting
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies