Do Son LayerX unmasks 12 TikTok downloader extensions tracking 130,000+ users. Even "Featured" tools can be traps. Learn how this resilient malware ecosystem works.
Akamai SIRT warns of a new Mirai campaign weaponizing EOL D-Link routers via CVE-2025-29635. Protect your network from zombie botnets—retire old hardware now.
Kaspersky unmasks "FakeWallet," a Trojan on the Apple App Store using stubs & enterprise profiles to steal crypto seed phrases. Learn how to protect your keys.
You do not get a suitable background in all videos. Recording most of them follows this process:...
Payouts King, the successor to BlackBasta, uses vishing and direct syscalls to bypass EDR and strike global targets. Learn how to defend your enterprise.
Splunk STRT identifies a new campaign bundling Ghost RAT with CloverPlus adware to steal RDP credentials and monetize infections. Patch your systems now!
CrowdStrike reveals a critical 9.8 CVSS flaw in LogScale Self-Hosted. Unauthenticated attackers can read arbitrary server files. Patch to v1.235.1+ now!
Atlassian Bamboo Data Center hit by critical 9.4 RCE (CVE-2026-21571). Attackers can hijack your build pipeline. Secure your supply chain—patch now!
Microsoft's OOB update for .NET 10 (CVE-2026-40372) hits Linux/macOS users. Authentication is at risk. Stop the bypass and rotate your keys today.
Spring Security reveals 7 flaws, including a critical 9.6 CVSS vulnerability in version 7.0. From auth bypass to X.509 impersonation, upgrade to 7.0.5 now.
CYFIRMA uncovers an elite stealth framework hijacking signed Intel utilities via AppDomain Manager. It targets EMEA finance with undetectable memory-only code.
Microsoft warns of a Teams campaign using fake IT support to hijack workstations via Quick Assist, move laterally with WinRM, and steal data using Rclone.
glibc version 2.43 and older face heap overflows and memory leaks. Learn about CVE-2026-5358, CVE-2026-5450, and CVE-2026-5928. Update your Linux systems now.
cybernewswire
New York, United States, 21st April 2026, CyberNewswire
Two critical CVSS 10.0 RCE flaws in Spinnaker's Clouddriver and Echo services allow full JVM and shell access. Patch your multi-cloud pipelines immediately.
SGLang faces a critical 9.8 CVSS RCE flaw (CVE-2026-5760). Malicious GGUF models can hijack AI servers via unsandboxed Jinja2 templates. Learn how to fix it.
Progress Software warns of 5 critical MOVEit WAF & ADC flaws. RCE and WAF bypass risks allow total system hijack. Upgrade to v7.2.63.0 now to stay secure.
OVN reveals two critical heap over-read flaws in ICMP and DHCPv6 processing. Learn how crafted packets can siphon sensitive memory and find the patch versions.
FortiGuard unmasks Nexcorium, a Mirai variant targeting DVRs via CVE-2024-3721. Secure your IoT devices against this multi-arch DDoS botnet. Patch now!
Canonical unveils the "Stonking Stingray." Ubuntu 26.10 arrives Oct 15, 2026, featuring Linux Kernel 7.2 and GNOME 51. See the full development roadmap here.
Linux Kernel 7.1 introduces a ground-up NTFS driver rewrite. Experience up to 110% faster multi-threaded writes and 4x faster drive mounting in 2026.