Critical Vulnerability in LiteSpeed Enterprise Risks Server Security
Critical LiteSpeed Enterprise vulnerability could allow low-privilege hosting account to achieve root on shared servers, risking cross-tenant compromise.
Wednesday, September 16
Red Heron's Aggressive Exploitation of Gitea RCE Hits Multiple Nations
Red Heron exploited Gitea RCE to compromise 13 orgs across six countries, targeting exposed instances for swift takeover.
Cyberattack on Thai ISP Exploits Fortinet and F5 Vulnerabilities
Thai ISP 3BB breached leveraging Fortinet and F5 vulnerabilities; attackers exfiltrated subscriber credentials and deployed backdoors.
Sandworm Exploits Cisco Vulnerabilities to Revive Cyclops Blink Botnet
Sandworm chains Cisco vulnerabilities to deploy an upgraded Cyclops Blink botnet, reviving disrupted infrastructure-takeover tooling.
Monday, September 14
Dell Urges Immediate Updates to Patch Critical ObjectScale Vulnerabilities
PremiumDell ObjectScale/ECS advisory DSA-2026-393 lists critical flaws including CVE-2026-70416 allowing unauthenticated RCE.
Critical Plesk Vulnerability Allows Unauthorized Root Access on Linux Servers
PremiumPlesk Backup Manager CVE-2026-68488 symlink race allows low-privileged users to escalate to root on affected Linux servers.
Wednesday, September 9
Monday, September 7
Google Releases Critical Update for Chrome to Fix Exploited Zero-Day Vulnerability
PremiumChrome 152 fixes an actively exploited V8 zero-day; update browsers immediately to mitigate active attacks.
Critical Zero-Day Vulnerability Threatens Magento and Adobe Commerce Stores
PremiumCritical unauthenticated RCE 'StyleSmuggler' is actively exploited, allowing attackers to backdoor e-commerce stores.
Wednesday, September 2
Iranian Hackers Exploit Coding Tests to Deploy Cross-Platform Malware
Nimbus Manticore lures developers with fake coding tests to deliver cross-platform RATs (Node.js/JavaScript) for espionage.
Iranian Cyber Espionage Group Targets Tech Specialists with New Malware
Kaspersky links NodeRabbit malware to Iranian espionage campaigns targeting aviation and fintech developers in multiple countries.
Monday, August 31
Friday, August 28
Critical Privilege Escalation Flaw Discovered in GlobalProtect App
PremiumGlobalProtect (Palo Alto Networks) has local privilege escalation flaws (CVE-2026-0251) enabling local code execution and privilege gains.
CISA Highlights Critical Vulnerabilities in Key Software Products
PremiumCISA added six actively exploited vulnerabilities to its KEV catalog affecting Microsoft, Linux, Red Hat and Citrix products.
Wednesday, August 26
Monday, August 24
Friday, August 21
Friday, August 14
Evooo1Bot: A New Threat Enhancing the Mirai Botnet with Sophisticated Stealth Features
PremiumA Mirai variant adds encrypted C2 communications and a credential 'sniffer' to improve stealth and persistence for botnets.
Jewelbug APT: A Dual Threat in Cyber Espionage and Cryptocurrency Theft
PremiumJewelbug APT operators run both state espionage and cryptocurrency theft from the same web control panel.
Wednesday, August 12
Get these articles delivered to your inbox.
Subscribe free