Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
ShinyHunters Defaces Clop Leak Site: Cybercrime Feud Goes Public
ShinyHunters breached the Clop ransomware gang's Tor leak site on September 18, 2026, uploading a text file and replacing the homepage…
CISA Adds Three Linux Kernel CVEs to KEV With Three-Day Deadline for US Agencies
CISA added three Linux kernel vulnerabilities to the Known Exploited Vulnerabilities catalog on September 18, 2026, giving federal civ…
TraderTraitor Moves Beyond Crypto: macOS Backdoors Found at Indian IT Firm
SentinelOne has identified a new TraderTraitor victim — an Indian IT services company with no cryptocurrency ties — compromised by the…
Claude Opus 5 Builds OpenAI Exploit Chain: From 72 Hours to Internal Repo
Three Hacktron researchers used Anthropic's newly released Claude Opus 5 to develop a full exploit chain against OpenAI's Discourse fo…
PhantomRaven: The npm Malware Likely Written by an LLM to Fuel Bug Bounty Fraud
CrowdStrike has exposed PhantomRaven, a JavaScript infostealer distributed via npm and likely generated with an LLM. The financially m…
Orkes Conductor's "Discovery Gap" Left a Critical RCE Unpatched for Months
Orkes Conductor faces active exploitation of CVE-2026-58138, an unauthenticated RCE with a CVSS 9.8 score. A fix existed since June 3,…
Check Point Patches Fifth Critical Management-Plane Flaw in Three Months
CVE-2026-91843 is a pre-authentication stack overflow in Check Point login that yields root RCE. It marks the fifth zero-login vulnera…
NoMachine: SSRF on UDP 4443 Exposes Enterprise Servers Without Authentication
ZDI advisory ZDI-26-712 (CVE-2026-92210) reveals an unauthenticated SSRF vulnerability in NoMachine's nxhtd service. The flaw stems fr…
Airbyte OneDrive Zero-Day: CVE-2026-92204 Remains Unpatched After 10 Months
Trend Zero Day Initiative disclosed CVE-2026-92204, an SSRF vulnerability in Airbyte's OneDrive connector with a CVSS 7.7 score that e…
Microsoft Leaves 0-Day Open: Refuses Patch for HTTP Proxy Privilege Escalation
ZDI published ZDI-26-708, a zero-day vulnerability in Windows HTTP Proxy enabling local privilege escalation. Microsoft declined to is…
Unbound 1.26.1: NLnet Labs Patches DNSSEC Heap Overflow with CVSS 9.1
A heap overflow in Unbound's DNSSEC validator enables remote code execution. The patch dropped today, but Linux distributions are lagg…
Microsoft Leaves Windows Zero-Day Unpatched: NTLM Credential Theft Without a Fix
ZDI disclosed ZDI-26-708, a zero-day vulnerability in Windows that exposes machine-account NTLM credentials. Microsoft initially slate…