News

A vulnerability in Cisco Unified Communications Manager, tracked as CVE-2026-20230, has a CVSS score of 8.6 and is actively being exploited in the wild. This flaw allows attackers to gain root access by sending crafted HTTP requests to the WebDialer service,…

The CVE report for June 22-28, 2026, reveals 1,909 new vulnerabilities, with 173 categorized as critical; 14 of these have a maximum CVSS score of 10. The week saw high-severity vulnerabilities primarily involving cross-site scripting and SQL injection. CISA…

The article discusses two critical vulnerabilities found in the Dell Wyse Management Suite, identified as CVE-2026-41120 and CVE-2026-49506, with severity ratings of 9.8 and 7.2 respectively. These vulnerabilities allow remote code execution, posing a…

The content features a post from the ISC (Internet Storm Center) detailing the current threat level as green, with Rob VandenBrink as the Handler on Duty. It highlights the ISC Stormcast for June 29, 2026, and promotes classes taught by Dr. Johannes Ullrich…

A critical vulnerability (CVE-2026-12537) in Google Cloud Gemini CLI poses a significant risk, with a CVSS score of 10, due to its potential for unauthenticated remote code execution in CI/CD workflows. Developers using versions prior to 0.39.1 and 0.1.22…

A critical vulnerability in the Hoppscotch API, identified as CVE-2026-50160, poses a significant security risk to self-hosted API deployments. It enables attackers to execute a mass assignment attack, allowing them to overwrite crucial security parameters,…

KDDI Corporation reported a significant data breach affecting approximately 14.2 million email accounts across six Japanese ISPs, attributed to a vulnerability in third-party software. The breach, detected on June 17, 2026, resulted in the potential exposure…

The Security Affairs Malware Newsletter Round 103, published by Pierluigi Paganini on June 28, 2026, features significant articles and research related to malware. Highlights include reports of the AryStinger botnet compromising over 4,000 legacy routers, a…

The weekly Security Affairs newsletter (Round 583) features key cybersecurity updates, including topics such as Russian intelligence using signal recovery keys to access messages, phishing attacks in the hospitality sector, and significant vulnerabilities in…

The DirtyClone vulnerability, identified as CVE-2026-43503, is a Linux kernel privilege escalation flaw with a CVSS score of 8.8. Discovered by JFrog Security Research, it allows unprivileged users to gain root access without leaving traces. This issue…

OpenAI has released the GPT-5.6 Sol model, a significant advancement in generative AI intertwined with national security dynamics, following a new cybersecurity executive order from the Trump administration. The model introduces three tiers: Sol (primary…

Anthropic's Claude Mythos 5 AI model, previously banned by the US government, has received federal clearance for redeployment. The decision follows a network blackout caused by a directive prohibiting access to foreign nationals, including Anthropic's own…

A serious vulnerability in libssh2, tracked as CVE-2026-58050, has been publicly disclosed. The flaw, which scores 8.3 on the CVSS scale, affects versions up to 1.11.1. An integer overflow in the publickey subsystem can allow a malicious SSH server to…

This page provides information about the release of YARA-X versions 1.18.0 and 1.19.0 by Didier Stevens. The 1.18.0 release includes three improvements and two bugfixes, notably the addition of a command-line option to limit CPU usage. The 1.19.0 release…

A high-severity vulnerability (CVE-2026-11940) has been identified in Python's CPython tarfile module that allows for directory traversal during archive extraction, enabling attackers to read or write files outside the intended directory. It has a CVSS score…

The article discusses a cybersecurity incident where Ukrainian officials claim that Russian intelligence used counterfeit support texts to deceive and steal messaging credentials. This tactic is aimed at gaining unauthorized access to communication systems,…

The FBI has issued a new alert regarding Russian intelligence operations targeting Signal messaging applications by stealing Backup Recovery Keys. This updated advisory reveals that the focus has shifted from obtaining SMS verification to acquiring these…

Microsoft warns of a phishing campaign targeting the hospitality sector using fake guest complaint emails that install a malware called TonRAT. Running since April 2026, the campaign employs an authentication laundering technique, exploiting platforms like…

OpenAI has previewed GPT-5.6, implementing restricted access and enhanced cybersecurity measures to protect against vulnerabilities through AI. This rollout aims to strengthen safeguards while addressing security challenges in AI deployment. Featured…

A report by Infoblox indicates that over 200,000 websites are utilizing investment scam templates developed with the Chinese framework Uni-App. Although Uni-App is a legitimate cross-platform development toolkit, it is being exploited by threat actors to…

The article discusses the increasing vulnerability of the education sector to cyberattacks, particularly from third-party vendors. It highlights that educational institutions possess sensitive data yet often lack the necessary budget and staff for…

The article discusses a new Linux kernel vulnerability named DirtyClone (CVE-2026-43503), discovered by JFrog Security Research. This is the fourth vulnerability in the DirtyFrag family, allowing unprivileged local users to escalate privileges to root by…

The US government has seized nearly 400 internet domains involved in the illegal streaming of FIFA World Cup matches as part of a crackdown on digital piracy, known as Operation Offsides. The operation targeted unnamed criminal organizations and was…

The U.S. State Department offers a reward of up to $10 million for information on the Russian-linked group UNC5792, which has been conducting extensive phishing attacks targeting Signal and WhatsApp accounts of U.S. officials and allies. The group exploits…

Security researchers reported the emergence of a new backdoor malware named Mistic, associated with a group known as Woodgnat. Mistic targets industries such as insurance and IT using a DLL side-loading technique via a legitimate Microsoft executable. This…

The content reports on a new cryptominer malware campaign exploiting the CVE-2026-33017 vulnerability in Langflow AI applications. Key points include: The malware, a variant of KORKERDS/MALXMR, targets exposed AI endpoints to mine cryptocurrency, performing…

The FBI has issued a warning about Russian intelligence hackers targeting Signal backup recovery keys, emphasizing that these attackers are attempting to exploit vulnerabilities in secure messaging systems and social engineering tactics. The alert highlights…

In 2026, a significant decline in trust towards autonomous AI in penetration testing was reported, with only 9% of organizations relying on AI for security, down from 29% in 2025. Security professionals have grown cautious after realizing AI systems often…

The article discusses the emergence of new SharkLoader malware that deploys Cobalt Strike in cyberattacks known as StrikeShark. This malware poses significant threats to Windows security, highlighting vulnerabilities faced by organizations. It emphasizes the…

Cisco has made recent acquisitions of Astrix Security and WideField Security to enhance its security platform, particularly focusing on the management of non-human identities (NHIs) such as API keys and AI agents that possess human-level privileges. As…

A recent report by Unit 42 highlights the Chinese APT group CL-STA-1062, which has expanded its operations targeting Southeast Asian government and critical energy infrastructure since mid-2025. This group, previously linked to attacks on Taiwan's web…

The Open Source Sustainability Initiative (OSSI) has been launched by the Commonhaus Foundation to assist enterprises in managing the security of end-of-life (EOL) open-source software. As the reliance on open-source projects increases, the initiative aims…

The article discusses a new cybersecurity threat emerging from a Chinese-speaking APT (Advanced Persistent Threat) that has deployed a backdoor named TinyRCT in a campaign targeting Southeast Asia. Key points include the identification of the backdoor's…

The article discusses the impact of AI on entry-level cybersecurity jobs, asserting that rather than displacing these positions, AI is reshaping them by automating repetitive tasks, which allows early-career professionals to focus on more strategic and…