#news


New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory

Sep 22, 2026 // 14:42

A new flaw in the Linux kernel’s KVM virtualization code for ARM64 processors can leave a freed piece of host memory exposed to a guest […]

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

Sep 22, 2026 // 14:22

A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables authenticated remote code execution, according […]

CISA orders feds to patch Zyxel flaw exploited for data theft

Sep 22, 2026 // 13:17

​Attackers are now actively exploiting a high-severity vulnerability in Zyxel GS1900 series switches, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The flaw […]

New Windows Defender zero-day blocks Microsoft antivirus updates

Sep 22, 2026 // 13:17

Over the weekend, security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) released another Microsoft Defender zero-day exploit that blocks antivirus updates. Naceri named it BigDiskBuster […]

Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

Sep 22, 2026 // 13:14

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched security flaw impacting Zyxel GS1900 series switches to its Known Exploited Vulnerabilities […]

WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session

Sep 22, 2026 // 13:13

A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a logged-in administrator […]

One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor

Sep 22, 2026 // 13:13

Malware already running on a Mac can quietly take over Meta’s Muse assistant and use the broad access its owner granted the app, security researcher […]

SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing

Sep 22, 2026 // 13:13

The threat actor known as SideCopy has been observed using spear-phishing lures to target academic institutions in India, expanding their strategic focus beyond government entities. […]

Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal

Sep 22, 2026 // 13:13

A malicious npm package named “indexed-btree” has been observed hiding its malicious behavior within application code rather than using lifecycle scripts, indicating that threat actors […]

BigCommerce alerts merchants of data breach linked to Ribon apps

Sep 22, 2026 // 00:36

Ecommerce platform BigCommerce has alerted multiple merchants to data breaches after attackers compromised credentials for third-party Ribon applications and used them to inject malicious scripts […]

Previous 1 … 25 26 27 28 29 … 388 Next