Archive
All articles, newest first. Page 2.
MailEnable XXE Vulnerability: Authenticated but Dangerous
ZDI-26-811 (CVE-2026-114552) reveals an XXE flaw in MailEnable's parseObjectResponse method that lets authenticated users extract sens…
Microsoft Authenticator for Android: The 'Confused Deputy' That Handed Corporate Tokens to Any App
A high-severity flaw in Microsoft Authenticator for Android let any installed app impersonate Teams and steal work-account access toke…
Arista VeloCloud: SQL Injection CVE-2026-114625 Scores CVSS 9.9, CISA Deadline October 26
Arista Networks disclosed CVE-2026-114625, a critical SQL injection in VeloCloud Orchestrator On-Prem rated CVSS 9.9. CISA added it to…
CVE-2026-114550: RCE in libwebsockets MQTT, One-Line Patch
A single-line bug in the libwebsockets MQTT parser enables pre-authentication remote code execution with a CVSS 8.1 score, and slow em…
Teams Vishing: Hundreds of IT-Themed Attacks Lead to Chaos Ransomware
On October 26, 2026, security teams face a new standard scenario: hundreds of vishing attacks via Microsoft Teams external chat using…
953 Magento Stores Infected: When Patching Doesn't Stop Persistent Malware
A campaign active since July 2025 has compromised 953 online stores, mostly Magento, using evasive JavaScript loaders; a fully patched…
ZDI Discloses Six Linux Kernel Zero-Days on Public Lists With Root Exploit, No CVEs Assigned
Trend Micro's Zero Day Initiative disclosed six Linux kernel vulnerabilities on public mailing lists on October 20, 2026, three with f…
CISA Cracks Down on Nextcloud: Three Days to Close CVE-2026-110447
On October 23, 2026, CISA added CVE-2026-110447 to its Known Exploited Vulnerabilities catalog, giving federal agencies until October…
AI Coding Agents Hijacked by a File in Downloads: Nothing to Patch
Forever Security demonstrated that a malicious AGENTS.md or CLAUDE.md file dropped into the Downloads folder can force OpenAI Codex an…
Gheist: GitHub's 'Partial Win' Left Private Repositories Exposed
The Gheist campaign compromised over 850 GitHub accounts to exfiltrate secrets via Actions workflows; GitHub's approval gate blocked p…
CVE-2026-96951: Microsoft Patches Actively Exploited MotW Zero-Day as CISA Sets Three-Day Deadline
Microsoft patched CVE-2026-96951 on October 13, 2026, a Windows Shell zero-day bypassing Mark of the Web with a CVSS 8.8 score. CISA a…
Brotli's Phantom Fix: Eight Months in Code, Zero Releases, Vast Attack Surface
An out-of-bounds write in Google's Brotli decoder, CVE-2026-111497 rated CVSS 9.2, exposes Node.js, Bun, Python, Envoy, and Istio. The…
CVE-2026-105312: Red Hat Kafka Console Bug Exposes Control Plane to Untrusted Tenants
Published October 20, 2026, CVE-2026-105312 is a privilege escalation vulnerability in Red Hat StreamsHub Console for Apache Kafka wit…
The AI Criminals' OPSEC Blunder: How Persistent Memory Turned Scalable Attacks Into Forensic Evidence
SOCRadar exposed the AI infrastructure of INC and The Gentlemen ransomware affiliates, revealing 8,257 messages across 133 sessions, 6…
PHP Discloses New Unpatched RCE Flaw Two Days After PHP2Shell Emergency
The PHP project assigned CVE-2026-115560 to an unpatched RCE vulnerability on October 23, 2026, confirming the same mitigation recomme…
eMudhra: 8 Intermediate CAs Compromised, Qualys Releases Operational Detection Tools
Qualys published QQL queries and QIDs to identify compromised certificates from eight eMudhra intermediate CAs hit by CVE-2026-111943…
BeyondTrust: Chinese APT Armory Castle Exploited Zero-Day for 47 Days
BeyondTrust disclosed a critical Remote Support flaw on Oct. 15, 2026, after Chinese espionage actor Armory Castle exploited it as a z…
Pillow 13.0.0 Fixes RCE: The Filename, Not the File, Was the Threat
A critical argument-injection flaw in Pillow, the most popular Python imaging library with nearly 436 million monthly PyPI downloads,…
CVE-2026-76268: Unauthenticated RCE in Splunk Enterprise Patroni REST API
A critical CVSS 9.8 flaw in the Patroni component of Splunk Enterprise allows attackers with internal network access to execute system…
NVIDIA Megatron Bridge: User-Interaction RCE in Model Config YAML Parsing
ZDI-26-787 details a code-injection flaw in NVIDIA Megatron Bridge's YAML config parser that yields arbitrary code execution. The offi…
Snort 3 Bug: When the VBA Inspection Engine Becomes an Attack Vector
ZDI-26-788/CVE-2026-20218 discloses a stack-based buffer overflow in Snort 3's VBA decompression routine. ZDI rates it an 8.1 RCE; Cis…
Zimbra CVE-2026-73570: Unauthenticated RCE Exploited Before Patch
CVE-2026-73570 enables unauthenticated remote code execution on Zimbra servers via log injection into Swatchdog. Microsoft observed ac…
OpenSSL CMP Format String Bug CVE-2026-63073 Exposes PKI Clients to Crash
A format string vulnerability in OpenSSL's CMP module allows unauthenticated remote attackers to crash PKI clients configured with exp…
Node2Shell: From Compressed Format to RCE on Node.js, Demonstrated on Official Linux arm64 Build
Imperva researchers achieved remote code execution on an unmodified Node.js 24.22.0 Linux arm64 build using crafted Brotli data, overc…