-
China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing …
-
Radio With No Radar: Why Agent Runtime Security Fails Without the Layers Beneath It
Nearly every agent security pitch now ends on the same promise: the product stops the bad action in real …
-
Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM’s Memory
Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, …
-
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app’s server by uploading a crafted …
-
Cyberattack on French plasma stores is enough to make your blood boil
Attackers tampered with cold-storage settings used by France’s civilian blood service after compromising a refrigeration supplier, the …
-
Poisoned cPGuard update hits thousands of web hosting servers
An attacker has compromised the update infrastructure of cPGuard, a security suite for Linux web hosting servers, and pushed out a …
-
10 Best Privacy-Focused Web Browsers That Don’t Track You
Want the best privacy-focused web browsers that don’t track you? Read on to find …
-
100-Day SSL Certificates Are Coming; Automation Can’t Wait Until 2027
With certificate validity periods getting shorter, organisations will soon need to manage renewals far more frequently than before. What …
-
Police Seize 100+ Servers After Four-Year Investment Fraud Probe
A long-running international operation to disrupt a multimillion-dollar investment fraud operation scored another impressive victory this …
-
How VidsSave Elevates Your Online Video Downloading Experience in 2026
Discover how VidsSave enhances your online video downloading experience in this article. In our digital age, videos have become a primary …
-
Top Mainframe Modernization Companies for Cloud Migration in 2027
has a clever way to update old systems using artificial intelligence. They use it to quickly figure out how old systems work, what they …
-
The Sandbox Fights Back: Joe Security Launches Adaptive Detonation
AI agents help Joe Sandbox uncover malicious behavior concealed by evasion techniques and unmet execution conditions. Joe Security‘s …
●●●
NVD
- CVE-2026-114550 – libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code …
- CVE-2026-90634 – An uncontrolled memory access in the PDF import code of Apache OpenOffice versions …
- CVE-2026-114551 – MailEnable Auth Cleartext Storage Information Disclosure Vulnerability. This …
- CVE-2026-114549 – NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability. …
- CVE-2026-114552 – MailEnable parseObjectResponse XML External Entity Processing Information Disclosure …
EXPLOITS
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
- Synametrics Syncrify 6.2 – command execution
SECURELIST
- MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT dev
- CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
- Filter generation in practice: from algorithms to LLMs
- Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
- Millions of security cameras at risk: DoS vulnerability in Intelbras devices