#news


Cloudflare Fixes Flaw That Let One Container Read Another Customer’s Leftover Disk Data

Sep 25, 2026 // 13:27

A flaw in Cloudflare Containers let a paying customer read data that other customers’ containers had left behind on the same server, Cloudflare and the […]

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

Sep 25, 2026 // 13:27

The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question […]

MacSync malware uses public iCloud calendars to deliver new payloads

Sep 24, 2026 // 23:57

A new variant of the MacSync info-stealing malware targeting macOS systems now uses public iCloud calendar events to deliver fresh payloads. MacSync is a Swift-based […]

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

Sep 24, 2026 // 23:39

Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS […]

TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords

Sep 24, 2026 // 23:39

Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNK_CondorFiltration that has targeted over 5,700 accounts across 28 Microsoft 365 tenants. According to […]

OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files

Sep 24, 2026 // 23:39

An AI agent on an internal OpenAI research task bypassed access controls on an Australian government Medicare statistics portal in June, Prime Minister Anthony Albanese […]

17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360

Sep 24, 2026 // 23:39

ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment, or a file on […]

Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore

Sep 24, 2026 // 23:38

AI coding agents are changing how quickly developers can build and ship software as well as how quickly credentials can become exposed. According to GitGuardian’s […]

Hackers start exploiting critical WordPress flaw for code execution

Sep 24, 2026 // 23:38

Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when […]

Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls

Sep 24, 2026 // 23:38

The logistics sector has become the target of a new malicious cyber campaign that distributes an Android spyware codenamed Corp MDM. According to Have I […]

Previous 1 … 19 20 21 22 23 … 388 Next