î „Swati Khandelwalî ‚Sep 22, 2026Network Security / Vulnerability Check Point has recently addressed a critical flaw in its Security Management Server that was exploited by attackers in targeted attacks. The flaw, identified as CVE-2026-93616, allowed unauthorized access to the server’s web …
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks Read More »
A recent discovery by researchers at LastPass and Delphos Labs revealed a fake LastPass Authenticator installer being distributed on GitHub. This malicious installer includes a Windows kernel driver that disables antivirus and security software, allowing a password stealer to run …
î „ The Hacker News î ‚ Sep 19, 2026 Security Operations / Artificial Intelligence A new CVE drops. Your scanner finds it. The severity score looks ugly. But that still does not answer the question that matters: Can it actually be …
Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar Read More »
To chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, three researchers at the security firm Hacktron utilized Anthropic’s Claude Opus 5. The chain began with a bug in OpenAI’s public help forum software …
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws Read More »
A cybersecurity expert has published functional exploit code for four vulnerabilities in the Linux kernel that allow a local user to gain root access, the highest level of privileges on a system. All four vulnerabilities have been patched by kernel …
Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root Read More »
î „Swati Khandelwalî ‚Sep 17, 2026Vulnerability / DNS Security Unbound, a popular DNS resolver, was found to have a critical heap overflow vulnerability in its DNSSEC validator. This vulnerability, tracked as CVE-2026-81642, could potentially lead to remote code execution. It affects all …
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone Read More »
î „Ravie Lakshmananî ‚Sep 16, 2026Vulnerability / Web Security A critical security vulnerability in Issabel Framework, a popular web-based framework for open-source unified communications PBX software, has recently been exploited by cybercriminals. The specific vulnerability identified as CVE-2026-89026 (CVSS v3.1 score: 9.8/CVSS …
Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution Read More »
A previously undocumented Brazilian banking malware operation has been uncovered by cybersecurity researchers, revealing a toolkit called KREMLIN. Known as REF9334, the threat actor behind this operation has been active since at least May 2025. They have been using phishing …
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens Read More »
Researchers have uncovered a new hardware attack known as DDRop, which compromises the memory protection in Intel and AMD confidential computing. This attack involves dropping writes to a server’s memory, causing the processor to continue reading outdated encrypted data as …
New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing Read More »
Microsoft recently revealed details of two cybercrime campaigns involving the exploitation of third-party email infrastructure to conduct financial fraud scams and using passkey-themed social engineering to compromise cloud environments. The first campaign saw threat actors sending over a million scam …
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data Read More »
