Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
PAPPL Raster Bug Enables Unauthenticated Remote Code Execution on Linux Print Servers
ZDI-26-656 discloses a heap buffer overflow in PAPPL that allows unauthenticated remote code execution when allow_remote=true. The fla…
Microsoft: Vishing on Employee Personal Phones to Breach M365
Storm-3032 and Storm-3121 are calling employees on their personal cell phones to steal Microsoft 365 credentials. The lack of logs on…
VirtualBox VirtioSCSI Memory Bug Opens Guest to Hypervisor
CVE-2026-71132: A memory initialization flaw in VirtualBox's VirtioSCSI device enables information disclosure with scope change. Oracl…
TrendAI Apex One: TmccCore Flaw Allows Local Root Escalation
CVE-2025-71414 in the TmccCore component of Apex One enables local privilege escalation to root. A patch was released in February 2026…
OpenAI Codex: RCE via .git/config, Patch Available
CVE-2026-19593 enables remote code execution in OpenAI Codex Desktop by exploiting Git configuration. A patch is available: here's wha…
Adobe Acrobat Reader: DigSig Bug Enables RCE via PDF, Urgent Patch Released
On September 10, 2026, Adobe patched CVE-2026-81973, a Use-After-Free vulnerability in the digital signature component of Acrobat Read…
CVE-2026-19397: Unauthenticated RCE in ASUS Control Center Express Agent
A critical flaw in the ASUS Control Center Express Agent exposes managed workstations to unauthenticated remote code execution via a p…
NI LabVIEW: Integer Overflow in VI File Parsing Exposes Sensitive Data
CVE-2026-18445 affects VI file parsing in NI LabVIEW. The ZDI-26-630 advisory details an integer overflow requiring user interaction t…
PivotC2: The Native FortiGate RAT That Hit 178 Devices
Russian-speaking threat actors are exploiting CVE-2025-25249 to deploy PivotC2, a specialized FortiGate RAT. CISA mandates forensic tr…
Backblaze Symlink Flaw in bzreports Allows System File Overwrite
A vulnerability in the Backblaze Personal Computer Backup service lets a local attacker render a Windows system unbootable. Tracked as…
ZDI-26-623: Linux Kernel Advisory Without CVE Complicates Risk Management
On September 9, 2026, Trend Micro published advisory ZDI-26-623, a use-after-free vulnerability in the Linux kernel that allows local…
Proxmox VE 7: Scans and Brute Force Exploit a Logging Blind Spot
A SANS ISC diary documents brute-force attacks against Proxmox VE 7 where an authentication endpoint returns HTTP 200 even on failed l…