Cybersecurity News
CVE-2026-63520: Microsoft SharePoint Remote Code…
Overview Rapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when…
Cybersecurity News
Hackers breached a small Polish energy plant via private…
Hackers breached a heat-and-power plant facility in Poland, which supplies heat to about 50,000 residents, using a private APN (Access Point Name) to…
Cybersecurity News
BdThemes Supply Chain Attack Poisons JSON to Create…
Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems…
Cybersecurity News
The Permanent Threat: Analyzing Aeternum’s…
Analysis of the Aeternum botnet loader, a threat leveraging Polygon blockchain smart contracts for decentralized C2 infrastructure and payload execution….
Cybersecurity News
China-linked hackers turning popular cybersecurity tool…
A China-linked threat actor is believed to be exploiting a critical vulnerability affecting cybersecurity software from the company N-able.
Cybersecurity News
Red Hat ACM Privilege Escalation Vulnerability Lets…
Red Hat has disclosed a critical privilege escalation flaw, tracked as CVE-2026-10090, affecting the Application Subscription controller in Red Hat…
Cybersecurity News
⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP…
A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call. Leaving a box exposed. Trusting the…
Cybersecurity News
N-able Issues N-central Hotfix 2 as Attackers Reach…
N-able has released a fresh round of hotfixes for N‑central as part of its investigation into ongoing exploitation of a recently disclosed security flaw…
Cybersecurity News
Critical One-Click Vulnerability in Atlassian’s Rovo AI…
The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and SharePoint data. The post Critical…
Cybersecurity News
Hackers breach TrueConf to trojanize client installers…
The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to replace client installers with…