#and


Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

Oct 5, 2026 // 12:35

A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS […]

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

Oct 3, 2026 // 17:37

The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations […]

The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations

Oct 3, 2026 // 14:01

Cybersecurity is being reshaped by the expansion of cloud infrastructure, AI, distributed systems, and increasingly complex digital environments. As organizations manage more identities, devices, data, […]

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

Oct 2, 2026 // 23:15

Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to […]

Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign

Oct 2, 2026 // 23:15

Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor. The activity, which has targeted […]

Why CISOs Struggle to Answer the Board’s Three Hardest Questions, and How to Fix the Report

Oct 2, 2026 // 14:39

The quarterly board meeting is two weeks out. The security team is pulling exports from the identity provider, the cloud posture tool, the vulnerability scanner, […]

Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers

Oct 1, 2026 // 20:00

Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data from organizations and […]

ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories

Oct 1, 2026 // 19:50

This week, the useful words are boring ones: inspect, cache, compile, store, trust. Each sounds harmless. Each can become an attack path when a system […]

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory

Oct 1, 2026 // 17:40

Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning […]

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

Sep 30, 2026 // 19:50

Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from […]

Previous 1 2 3 4 … 55 Next