Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
Linux Kernel: usbnet Race Condition Enables Privilege Escalation via Physical USB
CVE-2025-22050 in the Linux kernel's usbnet driver allows a physically present attacker to escalate privileges. The race condition, fi…
Chrome Zero-Day Attack: APT31 Exploits Patch Gap, Google Patches in 48 Hours
China-linked UTA0560 and JungleBamboo targeted NGOs with a three-vulnerability zero-day chain across Chrome and Windows between August…
CenterPoint Energy Confirms Data Breach: 7 Million Customers' PII at Risk
CenterPoint Energy filed an SEC Form 8-K on September 14, 2026, confirming a data breach in which an unauthorized actor accessed custo…
Attackers Expose Full Toolkit: 3BB Breach via FortiGate CVE-2024-21762
Thailand's Triple T Broadband (3BB) was compromised through CVE-2024-21762. Attackers accidentally exposed their entire operational ar…
CISA Confirms: CVE-2026-59310 in vCenter Now Exploited by Ransomware
The critical CVE-2026-59310 vulnerability in VMware vCenter, patched in July, has shifted from APT exploitation to ransomware attacks…
LiteSpeed Enterprise: Hosting User Can Gain Root on Shared Servers
cPanel disclosed a critical flaw in LiteSpeed Web Server Enterprise that lets a low-privilege website user escalate to root, bypassing…
Sandworm Strikes the Heart of Cisco Firewalls with 64-bit Cyclops Blink
The Sandworm APT group exploits two vulnerabilities in Cisco Secure Firewall Management Center to deploy a 64-bit Linux variant of Cyc…
Japan's Digital Agency Confirms VPN Breach Exposing 246,000 Government Records
Japan's Digital Agency confirmed a data breach on September 11, 2026, stemming from a VPN vulnerability in the Government Solution Ser…
Unit 42 Maps 40,000 Cloud Identities: From ML Clustering to SQL Heuristics
Unit 42 researchers analyzed over 40,000 AWS identities using UMAP and HDBSCAN, extracting patterns convertible into SQL heuristics to…
Cyber Resilience Act: A Legal Bug in the Line of Fire
From September 11, 2026, Article 14 of the CRA requires manufacturers to notify authorities within 24 hours of any actively exploited…
Tencent Patched the Sogou Flaw in 12 Days, But Left the Browser Alone
Chinese group UNC3569 compromised millions of Windows endpoints via Sogou Input Method, exploiting an embedded Chromium 80 browser wit…
Microsoft: Passkey-Themed Attacks Compromise 365 Accounts via Vishing and Graph API Abuse
Microsoft Security Research disclosed two threat actor campaigns exploiting passkey-themed social engineering to breach cloud environm…