Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
SonicWall SMA1000: Second Zero-Day Chain in Seven Weeks, 400+ Appliances Exposed
SonicWall disclosed two actively exploited zero-day vulnerabilities in the SMA1000 series on September 1, 2026. The SSRF-to-command-in…
ScreenConnect Weaponized: Self-Propagating Malware Spreads via File Transfer
Huntress documented a campaign that turns ConnectWise ScreenConnect into an automatic propagation vector. Modified clients, initially…
FalconFlank: Zero-Day in CrowdStrike Falcon Disclosed September 3
Researcher Nightmare Eclipse released a zero-day exploit for CrowdStrike Falcon Sensor that abuses the Office macro removal feature to…
APT28 Deploys HOOKEDGE: Lightweight Two-Stage Backdoor Targets European Governments
APT28 (BlueDelta) has deployed the HOOKEDGE backdoor against government, diplomatic, and defense targets in Romania, Spain, and Turkey…
OWASP Launches OASIS: AI and AppSec Join Forces Against Open-Source Vulnerabilities
OWASP unveiled OASIS on August 26, 2026, a community project that pairs AI-generated patches with human AppSec validation to accelerat…
MikroTrick Hits RouterOS: Active Attacks and First Coordinated LLM-Assisted Disclosure
CERT Polska uncovers the MikroTrick chain — six vulnerabilities in MikroTik RouterOS, two critical for unauthenticated remote control.…
Docker CVE-2026-34040: Ten-Year AuthZ Bypass via a Single Padded HTTP Request
CVE-2026-34040 lets attackers bypass Docker Engine authorization plugins with a single HTTP request exceeding 1 MB. The patch landed o…
StyleSmuggler: Zero-Day Magento Under Attack Since Sept. 4, No Patch Available
The StyleSmuggler vulnerability hits Magento Open Source and Adobe Commerce with unauthenticated RCE. Adobe has issued no advisory or…
IDScan.net: 153 Million Driver's Licenses for Sale, FBI Investigates
A dark web service claims 153 million driver's license scans traced to IDScan.net. The FBI is investigating and at least four class-ac…
HPE Patches Critical RCE in ArubaOS-CX: Two Independent Exploit Paths in the Same Switch
HPE released patches for 34 CVEs in ArubaOS-CX. Two independent unauthenticated RCE vulnerabilities in the same bulletin point to a sy…
JetBrains' Cobbler's Children Problem: Its Own TeamCity Server Went Unpatched
JetBrains confirmed the breach of its Cadence cloud service via a known critical vulnerability in TeamCity. AWS IAM credentials and pe…
Trezor's Phantom Certification: ShipMonk Retained Customer Data for Years
Trezor disclosed on September 4, 2026 that an additional 67,000 U.S. customers were exposed in the ShipMonk logistics breach, pushing…