#news


Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Aug 20, 2026 // 16:57

Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that […]

Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers

Aug 20, 2026 // 16:37

Citrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a critical-severity authentication bypass vulnerability. According to the […]

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution

Aug 20, 2026 // 16:26

A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team (CERT […]

Citrix urges admins to patch new NetScaler flaws as soon as possible

Aug 20, 2026 // 15:37

Citrix has warned customers to immediately secure their systems against two vulnerabilities affecting NetScaler Gateway secure remote access solutions and NetScaler ADC networking appliances. The […]

Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments

Aug 20, 2026 // 15:03

Researchers at the University of Massachusetts Amherst have demonstrated an attack that revives expired Visa contactless credit cards for real in-store purchases by rewriting the […]

CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification

Aug 20, 2026 // 14:49

Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDNs) convert client-facing HTTP/3 traffic into HTTP/1.1 requests to the […]

Why “Shady AI” is Security’s Next Big Governance Problem

Aug 20, 2026 // 14:49

In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who […]

Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices

Aug 20, 2026 // 14:34

A new Android threat codenamed Manic has been observed actively targeting Ukrainian banks, government and identity services, and messaging applications, as well as Russian and […]

CISA warns of hackers exploiting critical MLflow vulnerability

Aug 20, 2026 // 14:16

The Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that threat actors are now exploiting a critical MLflow vulnerability. MLflow is an open-source AI […]

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

Aug 20, 2026 // 14:14

Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL’s open-source AMMOS Instrument Toolkit, that allow an […]

Previous 1 … 68 69 70 71 72 … 388 Next