#news


Chinese hackers exploit WordPress, Zyxel flaws to steal govt data

Sep 22, 2026 // 23:57

A Chinese-speaking threat actor has been exploiting vulnerabilities in ZyXEL GS1900 Smart Managed Switches and WordPress to steal sensitive data from 996 devices and more […]

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

Sep 22, 2026 // 19:47

A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allows an unauthenticated attacker to run arbitrary […]

Check Point warns of Management Server zero-day exploited in attacks

Sep 22, 2026 // 19:36

Check Point Software released emergency hotfixes to address a critical Security Management Server vulnerability that could let attackers run arbitrary scripts. The Security Management Server […]

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

Sep 22, 2026 // 19:17

A zero-day proof-of-concept tool that stops Microsoft Defender from installing platform and signature updates by filling all available disk space was published on GitHub on […]

EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts

Sep 22, 2026 // 18:57

The EvilTokens platform that compromised more than 12,000 Microsoft accounts at over 10,000 organizations has been disrupted in an effort led by Microsoft’s Digital Crimes […]

Webinar tomorrow: Inside real-world Google Workspace breaches

Sep 22, 2026 // 16:16

Google Workspace breaches don’t always begin with sophisticated exploits or stolen passwords. Sometimes attackers simply convince users to grant them the access they need. Tomorrow, […]

D-Link warns of max severity zero-day bug in DIR-822A routers

Sep 22, 2026 // 15:56

D-Link warned customers of a maximum-severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch, affecting legacy DIR-822A dual-band Wi-Fi routers. This security […]

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

Sep 22, 2026 // 15:42

Attackers are exploiting a new flaw in on-premises VeloCloud Orchestrator (VCO), the server that manages the Edge devices in a VeloCloud SD-WAN, Arista said on […]

AI Agents Are Rewriting the Rules of Lateral Movement

Sep 22, 2026 // 15:32

Security teams have spent decades asking whether an identity has too much access. AI agents raise a harder question: how can we determine which paths […]

DORA Year Two: Can Your SOC Actually See the Attack?

Sep 22, 2026 // 14:53

When the Digital Operational Resilience Act (DORA) became enforceable across the European Union in January 2025, it triggered an administrative sprint. Financial entities spent the […]

Previous 1 … 24 25 26 27 28 … 388 Next