Cyber Security

Critical Portainer Flaws Grant Restricted Users Root Access to the Host

• Vulnerability Report

Critical Portainer Flaws Grant Restricted Users Root Access to the Host

Do Son May 19, 2026 0

Portainer fixes two critical 9.4 CVSS flaws (CVE-2026-44848/49) allowing instant container escape to host root. Patch your environments now!

Critical 9.8 CVSS: Severe SQL Injection Flaw Exposed in Marten .NET Document Store Engine

• Vulnerability Report

Critical 9.8 CVSS: Severe SQL Injection Flaw Exposed in Marten .NET Document Store Engine

Do Son May 19, 2026 0

Marten .NET library suffers a critical 9.8 CVSS SQL injection flaw (CVE-2026-45288). Learn how to block the exploit and patch your databases now!

New “TencShell” Malware Weaponizes Open-Source Rshell via Third-Party Access

• Malware

New “TencShell” Malware Weaponizes Open-Source Rshell via Third-Party Access

Do Son May 18, 2026 0

Cato CTRL intercepts "TencShell," a new stealth malware derived from open-source Rshell. Attackers use third-party access to breach networks!

CountLoader Malware Weaponizes EtherHiding to Deploy Stealth Crypto Clippers

• Malware

CountLoader Malware Weaponizes EtherHiding to Deploy Stealth Crypto Clippers

Do Son May 18, 2026 0

McAfee Labs exposes a massive CountLoader campaign using EtherHiding and AMSI bypass to drop stealthy cryptocurrency clippers. Secure your assets!

Unmasked: 16GB “Rocket” Database Leak Exposes The Gentlemen Ransomware Cartel

• Data Leak

Unmasked: 16GB “Rocket” Database Leak Exposes The Gentlemen Ransomware Cartel

Do Son May 18, 2026 0

16GB Rocket database leak exposes The Gentlemen ransomware cartel. Check Point Research unmasks their RaaS tactics, AI tools, and active exploits.

Critical RCE Flaw in Apache Flink (CVE-2026-35194) Threatens TaskManagers

• Vulnerability Report

Critical RCE Flaw in Apache Flink (CVE-2026-35194) Threatens TaskManagers

Do Son May 18, 2026 0

Critical CVE-2026-35194 flaw in Apache Flink allows RCE via SQL injection on TaskManagers. Upgrade your clusters immediately to secure your data!

Critical Strapi Flaws Enable Unauthenticated Admin Takeover and Server RCE

• Vulnerability Report

Critical Strapi Flaws Enable Unauthenticated Admin Takeover and Server RCE

Do Son May 18, 2026 0

Two critical flaws in Strapi CMS (CVE-2026-27886 & CVE-2026-22599) allow unauthenticated admin takeover and SQL injection. Update your nodes now!

The CVE Watchtower: Weekly Threat Intelligence Briefing (May 11 – May 17, 2026)

• Weekly Recap

The CVE Watchtower: Weekly Threat Intelligence Briefing (May 11 – May 17, 2026)

Do Son May 18, 2026 0

Cisco SD-WAN (CVE-2026-20182) and Exchange Server (CVE-2026-42897) are actively exploited in the wild! Discover the top threats you must patch now.

No Encryption Needed: New “GhostLock” Technique Weaponizes Windows SMB to Freeze Enterprise Files

• Vulnerability Report

No Encryption Needed: New “GhostLock” Technique Weaponizes Windows SMB to Freeze Enterprise Files

Do Son May 18, 2026 0

The GhostLock whitepaper exposes a critical blind spot in ransomware defense. Low-privilege users can freeze SMB shares with zero data encryption.

CVSS 10 Alert: Quest KACE SMA Auth Bypass Exploited to Hijack Managed Endpoints

• Vulnerability Report

CVSS 10 Alert: Quest KACE SMA Auth Bypass Exploited to Hijack Managed Endpoints

Do Son May 16, 2026 0

Quest KACE SMA CVE-2025-32975 (CVSS 10) exploited in the wild. Attackers bypass auth to seize admin control. Patch to version 14.1.101 or 14.0.341 now!

Paper Werewolf Unleashed: Custom Stealers and AI-Assisted Loaders Target Global Industrial Hubs

• Malware

Paper Werewolf Unleashed: Custom Stealers and AI-Assisted Loaders Target Global Industrial Hubs

Do Son May 15, 2026 0

Paper Werewolf APT targets industrial sectors with PaperGrabber stealer and EchoGather RAT. Learn to detect their AI-assisted loaders and custom tools.

PoC Released: Critical Linux Kernel ptrace Flaw Publicly Disclosed—Unprivileged Root File Access Possible

• Linux
• Vulnerability Report

PoC Released: Critical Linux Kernel ptrace Flaw Publicly Disclosed—Unprivileged Root File Access Possible

Do Son May 15, 2026 0

Technical details and PoC exploits disclosed for Linux Kernel ptrace flaw. Unprivileged users can steal root file descriptors. Patch to May 14 release!

cPanel & WHM Patch 5 High-Severity Flaws, Including 8.6 Severity File Read and SQLi

• Vulnerability Report

cPanel & WHM Patch 5 High-Severity Flaws, Including 8.6 Severity File Read and SQLi

Do Son May 15, 2026 0

cPanel & WHM fix 5 critical vulnerabilities (CVE-2026-29205). Fixes for arbitrary file read, SQLi, and privilege escalation are now live. Update now!

No Password Required: 9.8 Severity ELECOM Router Flaws Allow Total Network Takeover

• Vulnerability Report

No Password Required: 9.8 Severity ELECOM Router Flaws Allow Total Network Takeover

Do Son May 15, 2026 0

ELECOM routers hit by critical 9.8 CVSS flaws (CVE-2026-42062). Unauthenticated attackers can execute OS commands and bypass auth. Update firmware now!

Critical 9.2 CVSS RCE Found in Amazon Redshift JDBC Driver

• Vulnerability Report

Critical 9.2 CVSS RCE Found in Amazon Redshift JDBC Driver

Do Son May 15, 2026 0

CVE-2026-8178 in Amazon Redshift JDBC Driver allows RCE via unsafe class loading. Protect your data warehouse and update to version 2.2.2 now!

Critical 9.4 CVSS pgAdmin 4 Flaws Enable Full OS Command Execution

• Vulnerability Report

Critical 9.4 CVSS pgAdmin 4 Flaws Enable Full OS Command Execution

Do Son May 15, 2026 0

pgAdmin 4 v9.15 fixes a 9.4 CVSS auth bypass and multiple RCE flaws. Attackers can execute OS commands via SQL tools. Upgrade your pgAdmin server now!

Exploited in the Wild: Critical OWA Spoofing Flaw (CVE-2026-42897) Hits On-Premises Exchange Servers

• Vulnerability Report

Exploited in the Wild: Critical OWA Spoofing Flaw (CVE-2026-42897) Hits On-Premises Exchange Servers

Do Son May 15, 2026 0

CVE-2026-42897 exploited in the wild. A 8.1 CVSS OWA flaw allows RCE via malicious emails. Verify your Exchange Emergency Mitigation (EM) status now!

79 Security Holes Sealed: Google Issues Urgent Chrome Update to Fix 14 “Critical” Vulnerabilities

• Vulnerability Report

79 Security Holes Sealed: Google Issues Urgent Chrome Update to Fix 14 “Critical” Vulnerabilities

Do Son May 15, 2026 0

Google Chrome patches 79 vulnerabilities, including 14 "Critical" RCE threats. Update to version 148.0.7778.167 now to protect your data and browser.

Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version

• Vulnerability Report

Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version

Do Son May 14, 2026 0

NGINX 1.30.1 fixes a 9.2 CVSS RCE flaw (CVE-2026-42945) and five other critical vulnerabilities. Protect your web infrastructure and update immediately!

Critical IKEv2 Buffer Overflow and CAS Bypass Hit Palo Alto PAN-OS

• Vulnerability Report

Critical IKEv2 Buffer Overflow and CAS Bypass Hit Palo Alto PAN-OS

Do Son May 14, 2026 0

Palo Alto Networks patches CVE-2026-0263 and CVE-2026-0265. Fixes for IKEv2 RCE and CAS bypass are now available. Update your PAN-OS firewalls immediately!

Weaponized JPEG Payload Deploys Trojanized ScreenConnect for Covert Espionage

• Cybercriminals

Weaponized JPEG Payload Deploys Trojanized ScreenConnect for Covert Espionage

Do Son May 14, 2026 0

CYFIRMA warns of Operation SilentCanvas: A weaponized JPEG delivers trojanized ScreenConnect, bypassing AMSI and UAC for full-system surveillance. Stay alert!

200K Sites at Risk: 9.8 CVSS RCE via Burst Statistics Auth Bypass Exploited in the Wild

• Vulnerability Report

200K Sites at Risk: 9.8 CVSS RCE via Burst Statistics Auth Bypass Exploited in the Wild

Do Son May 14, 2026 0

200,000+ sites hit by CVE-2026-8181. A 9.8 CVSS Burst Statistics flaw allows RCE via auth bypass. 5,000+ attacks blocked. Update to 3.4.2 immediately!