#News


Bullhorn takes staffing platform offline to contain cyberattack

Oct 19, 2026 // 23:26

Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage. The company says it has isolated […]

Hackers hijack AOMEI update servers to secretly spread malware

Oct 19, 2026 // 23:26

Hackers reportedly compromised AOMEI’s servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them […]

OpenCode hack exposes API keys amid AI distillation attacks

Oct 19, 2026 // 20:37

The open-source AI coding project OpenCode has notified some users that stored API keys they used with external providers were exposed in a security breach. […]

F5 releases out-of-band patches for critical NGINX vulnerabilities

Oct 19, 2026 // 17:37

F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable […]

Inside the Underground Market for Know Your Client Services

Oct 19, 2026 // 17:37

In February 2026, the operator of OnlyFake pleaded guilty in the United States for his role in a service that generated more than 10,000 fraudulent […]

Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root

Oct 18, 2026 // 17:37

Hackers are exploiting an OS command-injection vulnerability in the SiteGuard Server Edition web application firewall (WAF), allowing them to execute commands with root or SYSTEM […]

Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack

Oct 17, 2026 // 18:36

ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. […]

Drupal patches critical RCE flaws, warns exploits may emerge soon

Oct 17, 2026 // 17:37

Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. […]

Critical BlockStrap flaw lets hackers run code on Magento servers

Oct 17, 2026 // 00:57

Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on […]

Zero-click attacks used targeted ads to deliver Candiru spyware

Oct 16, 2026 // 20:37

Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious […]

Previous 1 2 3 4 5 … 395 Next