-
Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: r/opensource bans AI projects, and …
-
FBI Links North Korea’s TraderTraitor to Record $6.43 Billion Binance Crypto Heist
The U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets to …
-
NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection
Cybersecurity researchers have disclosed details of what has been described as a “highly sophisticated infection chain” targeting …
-
Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
Malicious code on the website of prediction market Polymarket sold some signed-in traders’ positions and moved their funds to the hackers …
-
A gift to scammers: why you should probably keep your birthday a secret
You get a call from your bank saying there has been suspicious activity on your account. They read out your name, address and date of birth …
-
CVE-2026-120218 – A flaw has been found in Typemill up to 2.26.0. The impacted element is the function …
A flaw has been found in Typemill up to 2.26.0. The impacted element is the function ControllerApiImage::saveImage of the file …
-
CVE-2026-120217 – A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function …
A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/_colorizer.py …
-
CVE-2026-120198 – A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function …
A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. …
-
CVE-2026-118168 – The MapPress WordPress plugin before 2.97.15 does not restrict which user’s data its …
The MapPress WordPress plugin before 2.97.15 does not restrict which user’s data its front-end map embed handler renders, allowing …
-
CVE-2026-113482 – The Media Library Assistant WordPress plugin before 3.44 does not escape one of its …
The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode attributes before outputting it in an …
-
CVE-2026-113481 – The Media Library Assistant WordPress plugin before 3.44 does not check that the …
The Media Library Assistant WordPress plugin before 3.44 does not check that the requesting user is allowed to view a post before …
-
CVE-2026-107343 – The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.30 …
The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.30 does not perform a capability check on its …
●●●
NVD
- CVE-2026-120218 – A flaw has been found in Typemill up to 2.26.0. The impacted element is the function …
- CVE-2026-120190 – A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this …
- CVE-2026-120191 – A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is …
- CVE-2026-120189 – A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function …
- CVE-2026-115946 – XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an …
EXPLOITS
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
- Synametrics Syncrify 6.2 – command execution
SECURELIST
- Filter generation in practice: from algorithms to LLMs
- Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
- Millions of security cameras at risk: DoS vulnerability in Intelbras devices
- An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infras
- Deploying AI agents securely: how Kaspersky products mitigate AI threats