News about viruses, Ransomware, Trojans and other malicious software
A critical failure in the Burst Statistics plugin (CVE-2026-8181) is being exploited to get access with administrator privileges on WordPress, which turns sites that use this plug…
Cisco has confirmed that a critical vulnerability is being exploited in active attacks at Catalyst SD-WAN Controller, registered as CVE-2026-20182 (CVSS 10.0) which allows to skip…
A critical memory failure in NGINX, identified as CVE-2026-42945 again shows that even massively deployed software projects can drag historical defects with current impact. Vulner…
In recent weeks it was confirmed that malicious actors began to exploit, within hours, an authentication failure in PraisonAI, an open source framework for multiple agent orchestr…
An initial access corridor (IAB) identified as KongTuke has changed its delusion vector to Microsoft Teams, in some cases achieving a persistent intrusion into corporate networks …
An anonymous researcher who signs as Chaotic Eclipse / Nightmare -Eclipse has once again shaken the Windows ecosystem with two new zero- days - baptized by him as YellowKey and Gr…
Exim has published a critical update that corrects a post-memory-release vulnerability (use-after-free) in the analysis of the BDAT message body when the TLS battery is implemente…
RubyGems, the central repository and package manager of the Ruby community, has temporarily suspended new account records after what security providers describe as a powerful mali…
The family of bank Trojans TrickMo has taken an architectural leap that deserves attention: in the samples analyzed between January and February 2026, the operators have integrate…
