Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
Network Solutions Launches Dark Web Monitoring for Small Businesses
The veteran registrar adds threat scoring and credential-exposure alerts, lowering the barrier to dark-web intelligence for SMBs.
GitLab's 'Incoming' Email Token Turns Email Into a Supply-Chain Weapon
A long-lived token embedded in GitLab's incoming email addresses bypasses IP restrictions and 2FA, allowing anyone who possesses it to…
Latvia Arrests 2003-Born Hacker After Two Companies Hit in Seven Months
Latvian State Police arrested a 23-year-old Riga resident on September 15, 2026, for opportunistic cyberattacks on at least two firms,…
Public Exploit for CVE-2026-80521 Puts Ubuntu Containers at Root Risk
An exploit released on September 22, 2026 leverages CVE-2026-80521 for container escape on Ubuntu LTS. The upstream fix landed on Augu…
F5 BIG-IP APM Zero-Day: RCE on OAuth Authorization Server, 14,700+ IPs Exposed
CVE-2026-94127 hits BIG-IP APM when configured as an OAuth Authorization Server. CISA mandates forensic triage by September 25 for fed…
WordPress 7.1.2: Critical Core Path Traversal Patch, Conditional RCE
WordPress released version 7.1.2 on September 22, 2026 to address CVE-2026-87902, a critical core vulnerability with a CVSS score of 9…
BigDiskBuster: The Zero-Day That Leaves Microsoft Defender Stuck on Stale Definitions
Researcher NightmareEclipse has released BigDiskBuster, a proof-of-concept that blocks Microsoft Defender updates by saturating disk s…
Check Point Patches Zero-Day CVE-2026-93616 in Management Server: CVSS 9.8
Check Point has fixed the zero-day vulnerability CVE-2026-93616 in Security Management Server, actively exploited in July 2026. The CV…
ShinyHunters Hits the FBI: PeopleSoft Zero-Day and a Vacuum of Confirmation
The criminal group claims it breached the FBI by exploiting a zero-day in Oracle PeopleSoft. No confirmation has come from the FBI, Or…
Bifrost AI Gateway RCE Risk: Authentication Disabled by Default
CVE-2026-90898 in the Bifrost AI gateway enables unauthenticated remote command execution. The flaw is amplified by a design choice th…
Arista Confirms: CVE-2026-93952 in VeloCloud Actively Exploited
This article is based primarily on reporting from The Hacker News, corroborated by secondary sources; no direct vendor advisory is ava…
CVE-2026-89775: ARM64 Guest Gains Host Memory Access via KVM TLB Bug
A flaw in TLB invalidation size calculation lets a KVM guest read and write host physical memory without a VM exit. On RHEL-like distr…