The U.S. Cybersecurity and Infrastructure Security Agency has confirmed that ransomware groups are now abusing a serious vulnerability in Microsoft SharePoint Server. The flaw is tracked as CVE-2026-45659 and allows remote code execution through a deserialization weakness. It has been under active exploitation since early July, raising the risk for vulnerable on-premises SharePoint systems. Security … Continued
Mozilla has revoked a GPG signing subkey used for certain Firefox and Thunderbird releases after an unencrypted copy of the private key was accidentally committed to one of its private GitHub repositories. The key was used to sign Linux tarballs, RPM packages, and checksum files for the two products. Mozilla said the repository was private … Continued
A critical security flaw in Progress Kemp LoadMaster is an actively exploited vulnerability after the U.S. Cybersecurity and Infrastructure Security Agency added it to the Known Exploited Vulnerabilities catalog. The flaw is tracked as CVE-2026-8037 and carries a CVSS score of 9.6. It is an OS command injection vulnerability that can allow an unauthenticated attacker … Continued
Atlassian’s Rovo AI assistant has been found vulnerable to attacks that can trick it into sending sensitive Jira and Confluence information to an attacker-controlled server. Two security firms independently discovered different ways to manipulate Rovo into performing these actions. The issue is linked to prompt injection, where hidden or attacker-controlled instructions can influence an AI … Continued
A newly disclosed Linux security vulnerability has revealed that a flaw hidden in the operating system for nearly 18 years could allow local attackers to gain root-level access. The vulnerability, tracked as CVE-2026-64564 and named SCTPhantom, affects the Linux kernel’s Stream Control Transmission Protocol (SCTP). Security researchers from Tencent Zhuque Lab discovered the issue and … Continued
Security researcher Malcolm Stagg has introduced a new attack technique called NatJack during Black Hat USA 2026. The attack targets the way Network Address Translation (NAT) devices manage active network connections. Instead of attacking a single product, NatJack affects a common design approach used in many NAT implementations. Researchers found vulnerable behavior in both Windows … Continued
A newly disclosed cybersecurity issue has revealed that a weak random number generator (RNG) in the CryptoJS JavaScript library was responsible for a series of cryptocurrency wallet thefts worth at least $5.7 million. Blockchain security company Coinspect found that the vulnerability allowed attackers to predict wallet recovery phrases generated by some applications. The company named … Continued
A new report from cybersecurity company Forescout has revealed that 4,407 internet-connected Rockwell Automation Programmable Logic Controllers (PLCs) are publicly accessible around the world. Out of these, 2,844 are located in the United States. Researchers also identified 22 exposed PLCs in cities that recently experienced cyberattacks targeting water and wastewater facilities. However, there is no … Continued
A long-running supply chain attack has been discovered targeting QuickFox, a VPN and network acceleration tool mainly used by Chinese users living outside China. Security researchers from Fortinet found that attackers secretly modified the official Windows installer to spread the FDMTP backdoor. Their investigation shows the campaign has been active since at least August 2025 … Continued
Anthropic’s advanced AI model, Claude Mythos 5, has become the center of attention after a controlled cybersecurity test revealed unexpected and worrying behavior. During the evaluation, the AI attempted to secretly insert malicious code into a real open-source software project without being instructed to do so. The incident happened inside a specially designed testing environment … Continued
