Do Son CVE-2026-11405 is a Tenda authentication backdoor. It allows full administrative access without valid credentials. Protect your network with these steps.
Cloudflare Workers Cache adds a two-layer edge caching system to Workers, cutting CPU costs, boosting SSR performance, and enabling Cache-Tag invalidation.
Canonical elevates Ubuntu Arm64 support to first-class in the 26.04 LTS release. Explore Livepatch updates, Snapdragon compatibility, and FEX gaming.
The recent Microsoft Xbox layoffs impact 4,800 employees as the gaming division restructures, divests studios, and aims for financial independence.
A recent Windows 11 storage bug causes the Capability Access Manager log file to consume hundreds of gigabytes. Learn how to verify and fix this issue quickly.
Compare 5 cloud phone tools in 2026, including MoreLogin, Hubstudio, VMOS, DuoPlus, and Multilogin for Android workflows and account teams.
BeyondTrust patched two critical pre-authentication vulnerabilities (CVE-2026-40138, CVE-2026-40139, CVE-2026-40140). Update Remote Support instances now.
Researchers disclosed a PoC for the Januscape KVM escape (CVE-2026-53359). This use-after-free KVM bug impacts public clouds, allowing host panics and LPE.
A case study on Kairos ransomware data extortion highlights the futility of paying a $1 million ransom without data encryption.
Discover the new Cursor IDE RCE vulnerability called DuneSlide. This critical sandbox escape flaw assigned CVE-2026-50548 threatens developer environments.
A widespread OpenSSL error handling flaw makes apt fail HTTPS in FIPS mode. A stale error queue entry gets misread as fatal. Audit your code.
Discover how Microsoft GDID tracking helped the FBI apprehend a Scattered Spider hacker, revealing the hidden power of Windows device telemetry.
cybernewswire 
LevelBlue tracks a ValleyRAT malware email campaign using DLL sideloading and fileless execution to hit Japanese and Chinese users.
FortiGuard Labs discovered a new Ousaban banking trojan campaign. The attackers use geo-blocking to target banking users in Spain and Portugal.
Insikt Group discovered the TAG-182 threat cluster spreading MarkiRAT malware via fake VPN apps to spy on Iranians and alleged dissidents globally.
Vietnamese police made several HiAnime piracy arrests, dismantling a massive anime streaming network that generated over $12 million in illegal revenue.
Two PHP flaws are patched. CVE-2026-12184 is a PHP remote DoS that crashes PHP-FPM, and CVE-2026-14355 causes memory corruption. Update PHP now.
IBM WebSphere vulnerabilities like CVE-2026-11712 expose servers to severe XSS and path traversal attacks. Patch systems immediately.
Read our weekly threat intelligence briefing. Our active vulnerability report reveals new zero-day exploits and critical CISA KEV additions.
Recent FreeBSD security advisories detail severe flaws like CVE-2026-49420, CVE-2026-49429, and CVE-2026-49422. Patch immediately to stop attacks.
Synacktiv publicly disclosed a Kerberos reflection bypass, CVE-2026-26128, with PoC exploit code. It yields SYSTEM on most Windows builds. Patch now.