News about security failures, exploits and vulnerabilities in systems
A vulnerability of maximum severity has been reported and confirmed as being exploited in real environments in the LiteSpeed User-End plugin for cPanel: CVE-2026-48172(CVSS 10.0).…
A Belarusian-aligned actor known as Ghostwriter (also referred to as UAC-0057 or UNC1151 in various reports) has reactivated a speech-phishing campaign against Ukrainian governmen…
Trend Micro corrected a critical vulnerability on its Apex One endpoint protection platform that, although it requires administrative credentials and local access to the on-premis…
The discovery of the automated campaign called "Megalodon," which in a few hours introduced thousands of malicious commitments into GitHub's public repositories, brings to the for…
Ubiquiti has published critical patches for Unifi OS following the detection of several most serious vulnerabilities some exploitable without privileges and with low attack comple…
The arrest in Ottawa of Jacob Butler, alias "Dort," for his alleged relationship with the DDoS botnet operation known as KimWolf confirms what many specialists feared: networks of…
The U.S. agency CISA has added two vulnerabilities exploited in practice to its Known Exploited Vulnerabilities (KEV) catalogue, a warning that requires federal entities to urgent…
A Chromium failure discovered by the researcher Lyra Rebane and documented in the Chromium error tracker has again revealed a double failure: a vulnerability in the execution of S…
The detection of Showboat, a new Linux backdoor used against a telecommunications provider in the Middle East since at least mid-2022, confirms that sophisticated operations again…
