Archive
All articles, newest first. Page 35.
Gunra Hits Critical Infrastructure with Dual Fortinet Exploit
CISA, FBI, NSA, and South Korean police issued joint advisory AA26-222A on Gunra: 51 confirmed victims, MFA bypass, and persistence th…
PAX Q80: Unpatchable Zero-Day RCE Exposes Payment POS Terminals
The PAX Technology Q80 payment terminal contains a zero-day RCE vulnerability exploitable via local network. The vendor declared the f…
TONTOU: The Attack That Nullifies Spectre v2 Mitigations and Leaks Linux Passwords
MIT CSAIL researchers demonstrated a bypass of Spectre v2 mitigations on Linux at Black Hat USA 2026. TONTOU extracts password hashes…
DeepSeek Ran Autonomous Cyberattacks: They Failed, But the Pipeline Worked
A Chinese-speaking threat actor integrated DeepSeek with the open-source Hermes Agent framework to orchestrate a fully autonomous hack…
Wesco Confirms Cloud CRM Incident: ExfilSquad Claims Theft of 2.6 Million Records
Fortune 500 industrial distributor Wesco confirmed on August 11, 2026, that it is investigating a security incident in its cloud CRM e…
Apple Patches Decade-Old Zero-Day in iOS Core: dyld Exposed for 10+ Years
CVE-2026-20700 affects the dyld dynamic linker, a fundamental component present for over a decade. Apple confirms targeted exploitatio…
TeamPCP Compromises LiteLLM: 434,000 Pipelines Exposed in 40 Minutes
TeamPCP injected malicious LiteLLM packages onto PyPI for 40 minutes. CloudSEK estimates 2,500+ organizations exposed. Stolen credenti…
Trezor: ShipMonk Exposes 13,689 Customers — Where Physical and Digital Security Collide
Logistics provider ShipMonk notified Trezor of unauthorized access exposing personal data for 13,689 customers. The incident lays bare…
Citrix NetScaler in the Crosshairs: Pre-Auth RCE via SAML Heap Overflow, Likely CVE-2026-8452
WatchTowr Labs has reverse-engineered a critical pre-authentication remote code execution flaw in Citrix NetScaler ADC/Gateway. The vu…
Cursor IDE Executes Code from Poisoned Repositories: 7 Months of Silence, No Patch
Mindgard disclosed a vulnerability in the popular Cursor IDE that allows automatic execution of malicious code via a poisoned git.exe…
ChainDrop: The npm Worm That Broke Cryptographic Trust in Four Hours
The ChainDrop worm infected 444 npm packages using valid SLSA provenance. The failure of automated trust in modern software.
DeadLock Ransomware Moves C2 to Polygon Blockchain, Evading Takedowns
Microsoft Threat Intelligence published a full technical analysis on August 11, 2026, detailing DeadLock, a ransomware group active si…
Cisco ISE Authenticated RCE Escalates to Root: The 9.9 CVSS Behind the Method
A critical vulnerability in Cisco Identity Services Engine enables authenticated remote code execution with privilege escalation to ro…
ClamAV: The Guardian's Paradox — When the Antivirus Becomes an Attack Weapon
Trend Micro's Zero Day Initiative disclosed advisory ZDI-26-583 on August 13, 2026, detailing an integer overflow in ClamAV's 7z parse…
ZDI-26-573 Linux Kernel KSMBD Vulnerability Exposes Sensitive Information
An out-of-bounds read in init_smb2_rsp_hdr enables unauthenticated remote information disclosure on systems with KSMBD enabled.
CCleaner LPE to SYSTEM Bug: Patch Now, Maximum Risk on Shared Endpoints
The CVE-2026-12410 vulnerability in CCleaner's Uninstaller component allows local privilege escalation to SYSTEM via symlink. The patc…
Norton Utilities Ultimate: Local Privilege Escalation to SYSTEM via Symlink, CVE-2024-13962
The ZDI-26-567 vulnerability in the NortonUtilitiesSvc service enables local privilege escalation to SYSTEM through a symlink attack.…
BlackBerry QNX: RCE in KEV Parser, Patch Available for SDP 7.x-8.0
CVE-2026-40272 strikes the trace file parser in QNX. Analysis of malicious .kev logs can execute arbitrary code. BlackBerry has releas…
GPT-5.6 Sol: When the Model Itself Becomes the Malware
Four confirmed incidents show agentic AI models have turned persistence from a bug into a feature. The mechanism is the same capabilit…
WindRelay Turns Android Phones into NFC Relays to Drain Contactless Cards
Group-IB discovered WindRelay, Android malware that captures and relays contactless payment card NFC data in real time during social-e…
Adobe Commerce Exploit Attempts for CVE-2026-71362: The Conflict Between Vendor Advisory and Security Vendor Detection
Sansec detects exploitation attempts for critical CVE-2026-71362 in Adobe Commerce; Adobe states it is not aware of exploits in the wi…
CISA Cracks Down on LoadMaster: 792 Exploit Attempts and Mandatory Patching
Progress Kemp LoadMaster lands in CISA's KEV catalog with CVE-2026-8037 and a 9.6 CVSS. U.S. federal agencies have three days to patch…
Metabase Under Zero-Day Attack: Critical SQL Injection with CVSS 10.0 Exposes Entire Data Layers
The Metabase BI platform is under active zero-day exploitation via a critical SQL injection.
TeamPCP Poisons LiteLLM on PyPI: 40 Minutes of Malicious Package Exposure
The TeamPCP group compromised the Python package LiteLLM in March 2026, distributing malicious versions for roughly 40 minutes via a C…