Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
Windows Compatibility Appraiser: LPE Bug Escalates from LOCAL SERVICE to SYSTEM
ZDI-26-606 discloses a local privilege escalation vulnerability in the Microsoft Windows Compatibility Appraiser. Symbolic link manipu…
CVE-2026-65775: Microsoft Patches win32kfull UAF Discovered at Pwn2Own
Microsoft fixed CVE-2026-65775, a Use-After-Free in the Windows win32kfull driver discovered by Kentaro Kawane at Pwn2Own. The flaw en…
AMD Confirms Two TPM 2.0 Flaws: False Attestations on Ryzen from 3000 Series to AI
Two vulnerabilities in AMD's TPM 2.0 firmware jeopardize the hardware attestation chain on Ryzen processors. Patched firmware has been…
ShinyHunters Hits 100+ Universities with Oracle Zero-Day CVSS 9.8
The ShinyHunters group exploited CVE-2026-35273, an unauthenticated RCE in Oracle PeopleSoft, against more than 100 organizations befo…
CVE-2026-18294: RCE in OriginLab Origin Viewer via Malformed OGW File
The CVE-2026-18294 vulnerability in OriginLab Origin Viewer's OGW parser enables remote code execution with a CVSS 7.8 score. Exploita…
Parallels RAS Client: Local Vulnerability Allows Escalation to SYSTEM
CVE-2026-18263 affects the RAS RDP Backend Service with a CVSS 7.8 score. An exposed dangerous function allows low-privilege code to e…
TeamPCP Exploits AI Supply Chain to Steal One Terabyte of Credentials
The TeamPCP campaign compromised GitHub Actions and PyPI packages between March and April 2026. Over 2,500 organizations potentially e…
CISA Adds CVE-2025-62593 to KEV Catalog: Ray at Risk of RCE
CISA added CVE-2025-62593 to its Known Exploited Vulnerabilities catalog on August 17, 2026. The critical flaw in the Ray framework ex…
SilkParasite Exposes the Line Between AI-Assisted and AI-Generated Malware
Bitdefender uncovered SilkParasite, a cyber-espionage campaign using seven RAT families and AI-assisted development to target governme…
The Blackout That Wasn't: When PLC Doubt Shuts Down a Power Plant
An alleged four-day shutdown at an unnamed UK power plant remains officially unconfirmed as of August 23, 2026. The original source, d…
Threat Actors Use AI to Attack Siemens PLCs in Critical Infrastructure
U.S. federal agencies warn that AI-generated exploit scripts are actively targeting internet-exposed Siemens S7 PLCs. No OT expertise…
Noodlophile Stealer: Malware Rides the AI Hype Wave Through Fake Video-Generation Platforms
Threat actors are distributing the previously undocumented Noodlophile Stealer via bogus AI video-generation sites, luring victims to…