Archive
All articles, newest first. Page 3.
APT41 Adopts BlackLotus Techniques: BlackX UEFI Bootkit Hits Central Asian Diplomats
Kaspersky GReAT reports that APT41 deployed the BlackX UEFI bootkit against diplomatic agencies in Tajikistan, Uzbekistan, and Turkmen…
BlueHammer Shatters Version Scanning: The Same Defender Can Be Harmless or Fatal
Qualys published a full technical analysis of BlueHammer (CVE-2026-33825) on October 21, 2026, an eight-stage local privilege escalati…
PHP2Shell: When the Engine Becomes the Target, Every Downstream Defense Fails
Two PHP core vulnerabilities enable pre-application-code RCE on mod_php with CVSS 9.2. Cloudflare and Amazon confirm active in-the-wil…
US Air Force Pilots Bought USB Drives From Kabul Markets for Mission Planning in Afghanistan
A former Air Force IT security chief reveals that pilots in the early 2000s purchased USB drives from local Afghan vendors to move mis…
Langflow Under Attack: MCP Servers Become Vector for Authenticated RCE
CVE-2026-105740 in Langflow has triggered 1,423 exploit attempts on a honeypot. The attack mechanism exploits opaque MCP server config…
Palo Alto Networks: Active Exploit for CVE-2026-0322 in PAN-OS Management
Palo Alto Networks confirms active exploitation of CVE-2026-0322, an authenticated RCE with root privileges on PAN-OS firewalls. CISA…
PEERSTITCH: Malware Turns FortiGate Firewalls Into Espionage Platforms
Unit 42 describes PEERSTITCH, malware that embeds itself in FortiGate system daemons. The investigation links the intrusion to FortiMa…
CenterPoint: Data of 1 Million Texans Exposed, No Customer Notice Issued
The Texas Attorney General confirms a CenterPoint Energy breach affecting 1,062,060 residents, compromising names, addresses, Social S…
Microsoft Code Regression Exposes Windows Server to Remote Crash via DFS Packet
October 14, 2026 — DeafNews Staff. A regression in Microsoft code exposes Windows Server to remote crash with a single malformed DFS p…
Cisco SEG Under Siege: Third Zero-Day in a Year, Root via Email
Cisco fixes CVE-2026-76519 in Secure Email Gateway: CVSS 9.8 and active exploitation. A crafted email attachment can enable commands w…
AhsayCBS Under Attack: From a Java Boolean to SYSTEM-Level RCE
Two vulnerabilities in AhsayCBS enable RCE as SYSTEM/root via an attacker-controlled JSON flag. Active exploitation began October 7 wi…
UK Sanctions Cryptomus: Canada's $176M Fine Failed to Stop the Operation
The United Kingdom sanctioned Cryptomus on October 8, 2026, for laundering funds on behalf of the Russian government and its financial…
CVE-2026-108065: Critical Pre-Auth SQL Injection in WebAlliance B2B E-Commerce Platform
An unauthenticated SQL injection flaw with a CVSS 9.8 score affects Channel Software WebAlliance eCommerce. The vulnerability allows s…
ROMULUS: The ClickFix Platform Delivering Malware Across Six Servers
All technical details come from a single Infosecurity Magazine article reporting on Vedere Labs research; the vendor's original blog p…
Hirudo: The Trojan That Deceives Banking Apps From Within by Replacing Them With Patched Copies
Hirudo marks a paradigm shift in Android malware: no more overlays, but complete replacement of the banking app with a patched copy th…
From Six Months to Six Days: GPT-5.6 Sol Built the $250,000 Chrome Exploit
XBOW used GPT-5.6 Sol to build a full-chain Chrome exploit in six days with $40,000 in compute. Google paid the maximum $250,000 bount…
Vghost: Tencent's AI Finds Linux Kernel vhost Flaw in Two Hours
CVE-2026-74580, dubbed Vghost, is a Linux kernel vhost subsystem vulnerability discovered with Tencent's Corvus AI multi-agent system.…
Chrome and Firefox: 114 Vulnerabilities Patched as Mozilla Launches Firefox Enterprise
On October 14, 2026, Google and Mozilla released security updates fixing a combined 114 vulnerabilities — 37 in Chrome 155 and 77 in F…
CVE-2026-89111: Critical SSRF in SAP Cloud SDK for Python Exfiltrates Credentials
SAP patched a maximum-severity SSRF vulnerability in the Cloud SDK for Python on October 13, 2026. Tracked as CVE-2026-89111 with a CV…
Ransomware Gets Personal: 37% of Attacks Now Include Direct Threats Against Staff
A Semperis survey of 1,200 organizations hit by ransomware in the first half of 2026 finds that 37% of attacks involved psychological…
471 Million Breach Notices, But Only 24% Say How It Happened
In the first half of 2026, U.S. residents received 471.2 million data breach notifications, surpassing the full-year 2025 total of 297…
FBI Arrests Ransomware Negotiator: Industry Under Scrutiny
Edward Dubrovsky, 54, was arrested by the FBI in Pennsylvania on Oct. 8, 2026, on extortion conspiracy charges. The case puts the rans…
Zero-Day RCE in Genesis World: ZDI Publishes Advisory With No Patch Available
TrendAI Zero Day Initiative disclosed ZDI-26-756, a zero-day deserialization vulnerability in Genesis World that enables remote code e…
CVE-2026-39919: RCE via PDF in Ghostscript — the -dSAFER Sandbox Isn't Enough
A heap buffer overflow in Ghostscript's JPEG 2000 decoder enables unauthenticated remote code execution through malicious PDFs. The bu…