1,437 articles
LinuxAttackers are weaponizing an exploit chain in Zammad helpdesk combining session fixation (CVE-2026-102489) with root privilege escalation (CVE-2026-102490).
GoogleGoogle published the Android October 2026 bulletin fixing high-severity System elevation of privilege flaws (CVE-2026-28640) requiring zero user interaction.
GoogleGoogle released Chrome 154.0.8037.97 resolving a critical out-of-bounds write flaw in WebGL (CVE-2026-103628) that exposes memory to arbitrary code execution.
AWS CloudCVE-2026-103956 in AWS Labs Loom (CVSS 10.0) let any network client act as super-admin on IdP-less deployments. Two SSRF flaws leaked tokens. Upgrade to 1.7.0+.
Threat IntelKiteworks fixed a CVSS 10 root code-execution flaw in Email Protection Gateway (CVE-2026-54154) and three 9.8 account takeovers. Upgrade EPG and Core to 9.5.1.
MicrosoftLonglegs (Storm-2603) used on-prem SharePoint access, a BYOVD EDR killer and SYSVOL replication to push Warlock ransomware to 33+ hosts. IOCs inside.
Threat IntelMetaMCP CVE-2026-79538 (9.8) and CVE-2026-79537 (9.1) enable container code execution and cross-tenant MCP tool hijacking. No patch exists; mitigations inside.
KubernetesDell DSA-2026-448 fixes two CVSS 10 missing-authentication flaws in Container Storage Modules that expose storage admin credentials. Upgrade CSM to 1.18.0.
Data BreachA phishing click let hackers copy Arizona court backup files: SSNs of ~1.3M FARE debtors, protective-order records and 150,000+ foster care reports.
Citrix NetScalerCitrix fixes CVE-2026-88779, a SAML memory overflow that crashes NetScaler ADC and Gateway. Last week's 14.1-73.37 and 13.1-64.23 builds are still vulnerable.
Cyber AttackANSSI's DGFiP report: infostealer credentials, weak MFA and an unmonitored portal let attackers steal impots.gouv.fr and cadastre data undetected.
MicrosoftExchange Server CVE-2026-96940 lets authenticated users read other mailboxes. Microsoft rates it Exploitation More Likely. Install the September 2026 v2 SU.
MicrosoftCisco Talos ties China-nexus UAT-11587 to Antino, a Rust backdoor taking orders via Outlook and exfiltrating via OneDrive, on ~350 endpoints in 8 countries.
Threat IntelLiteLLM CVE-2026-93355 lets a signed JWT with an unverified email claim seize any account, including proxy_admin. No fix yet; cache-leak and SSRF CVEs patched.
Data BreachJapan's Times Car confirms a September 25 intrusion exposed ~6.6M accounts and ~1.6M identity-document images, including driver's license scans.
MicrosoftProofpoint: China-aligned TA419 posed as an ex-White House OSTP official and an Anthropic employee to steal AI policy experts' Microsoft 365 sessions.
KubernetesSUSE Rancher CVE-2026-88804 (CVSS 9.6) lets unauthenticated attackers rewrite UI settings, plant login-page script and take over managed Kubernetes clusters.
Threat IntelHPE bulletin HPESBNW05150 fixes 18 Instant On AP flaws, including two CVSS 9.8 unauthenticated RCE bugs (CVE-2026-76721, CVE-2026-76722). Update to 3.4.2.0.
DevSecOpsJapan, US, Australian and German agencies say DPRK's WaterPlum hit 30,000+ PCs and 7,000+ crypto wallets via fake job tests, npm malware and VS Code tasks.
GoogleGTIG's AI-era report: CVE disclosures doubled in 2026, 141 bugs exploited by August vs 127 in 2025, and 50% of AI-discovered flaws lead to RCE, per Google.
Threat IntelA critical heap buffer overflow in Apache Thrift C++ THeaderTransport allows remote adversaries to corrupt memory during ZLIB frame decompression.
OT / SCADAA critical stack buffer overflow in Moxa industrial protocol gateways allows authenticated attackers to corrupt memory and hijack critical substation controllers.
Threat IntelA high-severity identity validation flaw in ProcessOne ejabberd allows authenticated users to impersonate any target user via unvalidated authzid tokens.
Threat IntelA critical stack-based buffer overflow in Fortra Core Privileged Access Manager BoKS autoregistration daemon allows unauthenticated remote code execution.