News about viruses, Ransomware, Trojans and other malicious software
Microsoft has confirmed critical vulnerability in Exchange Server identified as CVE-2026-42897 that allows the execution of code in the browser context through a cross-site scribi…
The inclusion by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) of the vulnerability CVE-2026-20182 in its "Known Exploited Vulnerabilities" catalogue requires t…
A critical failure in the Burst Statistics plugin (CVE-2026-8181) is being exploited to get access with administrator privileges on WordPress, which turns sites that use this plug…
Cisco has confirmed that a critical vulnerability is being exploited in active attacks at Catalyst SD-WAN Controller, registered as CVE-2026-20182 (CVSS 10.0) which allows to skip…
A critical memory failure in NGINX, identified as CVE-2026-42945 again shows that even massively deployed software projects can drag historical defects with current impact. Vulner…
In recent weeks it was confirmed that malicious actors began to exploit, within hours, an authentication failure in PraisonAI, an open source framework for multiple agent orchestr…
An initial access corridor (IAB) identified as KongTuke has changed its delusion vector to Microsoft Teams, in some cases achieving a persistent intrusion into corporate networks …
An anonymous researcher who signs as Chaotic Eclipse / Nightmare -Eclipse has once again shaken the Windows ecosystem with two new zero- days - baptized by him as YellowKey and Gr…
Exim has published a critical update that corrects a post-memory-release vulnerability (use-after-free) in the analysis of the BDAT message body when the TLS battery is implemente…
