Sparrow Malware Unites China-Linked Cyber Espionage Campaigns
Researchers link three China-affiliated espionage clusters through a shared Sparrow malware ecosystem targeting telcos, governments, and research.
Monday, November 9
Stealthy Backdoor in Control Web Panel Puts Linux Servers at Risk
PremiumResearchers found a webserver backdoor in Control Web Panel that executes attacker commands without leaving access log entries.
Critical OpenSSH Flaw Affects Alpine Linux and OpenWRT
PremiumOpenSSH authentication bypass affecting musl libc combinations allows acceptance of certain long passwords, impacting Alpine and OpenWRT builds.
OpenAI's GPT-6 Cyber Revolutionizes Vulnerability Detection
PremiumOpenAI's GPT-6 Cyber reportedly discovered 81 Firefox flaws and produced exploit code for hundreds of Linux bugs, raising dual-use concerns.
Friday, November 6
Wednesday, November 4
Node-RED Vulnerability Actively Exploited to Deploy Malicious Payloads
Active exploitation of a critical Node-RED flaw attempted to deploy Linux bot binaries and webshells from same IP.
UK Warned of Imminent Surge in Cyberattacks Due to Exploited Vulnerabilities
NCSC chief warns increasing exploitability of tolerated vulnerabilities will raise UK cyberattack volume in coming months.
Critical Security Flaw in LXD and Incus Allows Unauthorized Control Over Linux Systems
Critical certificate validation bug in LXD/Incus lets attackers bypass login checks and take control of clusters and VMs.
cPGuard Update Exploit Distributes Backdoor to Linux Servers
Compromised cPGuard autoupdate distributed a backdoor and data-stealing script, affecting customers' Linux servers and credentials.
Monday, November 2
Severe Vulnerability in Linux Kernel Threatens MPTCP Servers with Remote Exploits
PremiumCritical Linux kernel MPTCP vulnerability enables unauthenticated remote root on servers running Multipath TCP listeners.
Nation-State Actor Exploits PAN-OS Vulnerabilities to Breach US Government Network
PremiumSuspected Chinese actor chained PHP2Shell to root Palo Alto firewall servers and target US government systems.
NetamLoader Malware Exploits .NET Injection to Target Asian Government Systems
PremiumNetamLoader uses .NET assembly injection to compromise Windows 10 government builds in Asia, delivering persistent backdoors and tooling.
Critical GitLab Vulnerability Exploited Against Alpine Linux
PremiumCVE-2026-97229 GitLab remote code execution is being actively exploited; immediate remediation required.
Friday, October 30
AI Model Generates Exploit for Critical Linux Kernel Vulnerability
PremiumAn unreleased Claude model generated a working exploit for critical Linux kernel CVE-2026-98432 enabling root commands without user interaction.
PHP2Shell Vulnerabilities Exploited in Global Cyber Attacks
PremiumPHP2Shell exploitation observed against internet-exposed management interfaces, with attackers chaining Linux kernel bugs for full compromise.
Monday, October 26
Accidental Disclosure of Critical Linux Kernel Flaws Raises Security Concerns
PremiumTrend Micro ZDI reports unpatched Linux kernel flaws were accidentally posted, including CVSS 9.0 issues targeting ksmbd.
Russian Hackers Exploit New Backdoor in Attack on Ukrainian Logistics
PremiumESET links Sandworm and partners to a destructive wiping attack using a new mesh network backdoor targeting Ukrainian logistics firms.
Friday, October 23
Critical Vulnerability in OpenCode Allows Code Execution on Windows and WSL
PremiumOpenCode agent vulnerability allowed malicious MCP servers to execute code on developers' Windows and WSL environments during sign-in.
Critical Linux KSMBD Vulnerabilities Exposed, Awaiting Kernel Patches
PremiumTwo KSMBD kernel SMB server RCEs (CVSS 9.0) disclosed publicly with no upstream fix yet, exposing Linux SMB services.
Wednesday, October 21
Get these articles delivered to your inbox.
Subscribe free