-
cPanel has disclosed CVE-2026-67401, a SQL injection vulnerability in its EmailTrack functionality. This flaw allows an authenticated account holder to create arbitrary files on a server, which can ultimately enable them to execute code with root privi…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Fortinet FortiSandbox Vulnerability Allows Unauthenticated Attackers to Access Sensitive Information
Fortinet has disclosed a critical vulnerability involving improper access control in the FortiSandbox web interfaces. This issue could allow an unauthenticated remote attacker to access sensitive information by sending specially crafted HTTP requests. …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Information-stealing malware is expanding its collection logic to target locally stored data from AI coding agents, including Claude, Cursor, Codex, Cline, Continue, and OpenCode. The shift puts developer credentials, Model Context Protocol configurati…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Ivanti has released security updates addressing 10 vulnerabilities in Endpoint Manager Mobile (EPMM), Neurons for ITSM, and Sentry. The vulnerabilities include several critical remote code execution (RCE) issues in Neurons for ITSM, an authentication b…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A cryptocurrency-stealing campaign that abuses Google Sheets and the Google Visualization API as a covert command-and-control channel, delivering obfuscated JavaScript directly into victims’ browser sessions. The operation marks a significant evolution…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google released Chrome version 153 to the Stable channel for Windows, macOS, and Linux, including 230 security fixes and addressing CVE-2026-87491, a zero-day vulnerability currently being exploited in the wild. Because of the unusually large number of…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A large-scale Redis cryptojacking operation targets thousands of exposed Linux servers by abusing unauthenticated Redis deployments to install XMRig cryptocurrency miners and establish durable, cron-based persistence. The campaign scans IPv4 address ra…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft’s September 2026 Patch Tuesday security update addresses 973 vulnerabilities across various products, including Windows, Microsoft Office, Azure components, Exchange Server, developer tools, and others. Among these vulnerabilities are two zer…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A human-operated intrusion campaign in which attackers abuse Microsoft Teams external collaboration to impersonate internal IT or helpdesk staff, persuade employees to grant remote control of their PCs, and then move toward critical enterprise infrastr…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Jellyfin has released version 12.0, a significant update to its open-source media server. This version includes a wide range of platform improvements and essential security updates affecting both the server and the web client. The project strongly advi…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶