Archive
All articles, newest first. Page 11.
Microsoft Leaves Windows Zero-Day Unpatched: NTLM Credential Theft Without a Fix
ZDI disclosed ZDI-26-708, a zero-day vulnerability in Windows that exposes machine-account NTLM credentials. Microsoft initially slate…
SparroWocky: New APT Backdoor Targets Latin American Governments
ESET discovers SparroWocky, the modular backdoor from China-aligned FamousSparrow that replaced SparrowDoor in August 2025. Eight Lati…
Cisco ISE: Emergency Patch for Actively Exploited Zero-Day with CVSS 10
Cisco has released urgent patches for CVE-2026-76460, an authentication bypass with a maximum CVSS 10.0 score in Cisco Identity Servic…
ZDI Discloses Zero-Day in BusyBox: Symlink Directory Traversal Enables Arbitrary File Creation
Trend Micro's Zero Day Initiative published advisory ZDI-26-705 on September 17, 2026, detailing a zero-day vulnerability in the BusyB…
Cisco FMC Under Fire: 9.8 Bug Opens Management Center to Unauthenticated RCE
On September 16, 2026, Cisco released a patch for CVE-2026-20242, a critical vulnerability in Secure Firewall Management Center that e…
GIMP Under Attack: APNG Buffer Overflow Enables Remote Code Execution
The ZDI-26-713 vulnerability in GIMP allows RCE via malicious APNG files. CVSS 7.8, patch available after 140 days of coordinated disc…
NoMachine Critical mDNS Flaw: Unauthenticated RCE on Local Networks. Patch Now
The Trend Micro Zero Day Initiative published advisory ZDI-26-710 on September 16, 2026, detailing a heap-based buffer overflow in NoM…
MindsDB Exposed to 0-Day RCE: OpenBBtable Class Executes Python Code Without Validation
ZDI-26-707 (CVE-2026-92207, CVSS 8.8) enables remote code execution on MindsDB via Python injection in the OpenBBtable class. The vend…
CVE-2026-89026: Hard-Coded JWT Key Enables RCE on Issabel PBX
A hard-coded cryptographic key in the Issabel Framework allows unauthenticated remote code execution on PBX phone systems. The Shadows…
CrewAI Zero-Day RCE: Malicious Agents Execute Arbitrary Code via Repository
CVE-2026-92206 hits the CrewAI framework with a CVSS 8.8 score. Unsafe reflection in load_agent_from_repository enables remote code ex…
N0va Turns Phishing Into Invisible Enterprise Access
N0va targets organizations in North America and Europe by abusing legitimate OAuth flows to capture access tokens and establish persis…
A Quote in a Folder Name Opens Root on Mac: The Parallels Bug
CVE-2026-90894: The most widely used virtualization software on Mac runs a root daemon with a world-writable socket. The fix lands in…
Acronis Patches CVE-2026-87886: In-the-Wild Exploit in cPanel Plugin
Acronis has released urgent patches for CVE-2026-87886, a local privilege escalation vulnerability with a CVSS 7.8 score that is alrea…
TP-Link Tapo C200: Two Zero-Days Allow Video Feed Access for Adjacent Attackers
OPSWAT disclosed two zero-day vulnerabilities in the TP-Link Tapo C200 camera that break local authentication. An attacker with adjace…
Google Patches Actively Exploited Android Zero-Day on Pixel: 110 Flaws Fixed
Google released the September 2026 Pixel security bulletin addressing 110 vulnerabilities. CVE-2026-58704, a zero-day in the Cellular…
Active Exploits Target WooCommerce Wholesale Lead Capture Plugin: The Patch Gap
Threat actors are exploiting CVE-2026-27540 in the WordPress WooCommerce Wholesale Lead Capture plugin. A patch has existed since Febr…
Active WSO2 API Manager Exploit: JWT Bypass with Forged Admin Tokens
CVE-2026-5430, a critical vulnerability in the JWT component of WSO2 API Manager, is under active exploitation. Forged tokens with adm…
Google Workspace Attacks Now Start With OAuth, Not Email
The Google Workspace attack chain has shifted from email-first to OAuth-first. Stolen OAuth tokens survive password resets, never expi…
TED Backdoor Turns HAProxy Into a Spy: Load Balancers Are the New Blind Spot
Rapid7 researchers have uncovered TED, a Linux toolkit that compiles a persistent espionage backdoor directly into victims' HAProxy 2.…
Switzerland: Ukrainian Ransomware Developer Sentenced to 12 Years, 9 Months
A Zurich district court sentenced a 52-year-old Ukrainian developer to 12 years and 9 months in prison for creating the LockerGoga, Me…
CVE-2026-46300 Fragnesia: Linux Kernel Bug Exposed on GKE Since May
Fragnesia exploits a flaw in skb_try_coalesce() to corrupt the page cache and gain root. Disclosed May 13, with public PoC and patch i…
Ransomware Recovery in 24–48 Hours Remains Out of Reach: 4 Cases Out of 800+
Fenix24's State of Recoverability 2026, based on 500+ ransomware recoveries, shows only 0.5% of clients neared their 24–48 hour restor…
DPRK APT Infiltrates South Korean Firms via Backdoor Embedded in HAProxy Code
Rapid7 disclosed on September 3, 2026, a previously undocumented Linux toolkit—TED and curlRAT—used by North Korean APT groups for lon…
Zero-Day Time Compressed to Hours: The Patch-Exploit Model No Longer Holds
Claude Mythos has collapsed discovery-to-exploit timelines. For CISOs, the only option left is breaking the attack chain before a work…