-
XWorm’s HBrowser plugin gives attackers interactive control of authenticated browser sessions on infected endpoints, allowing them to operate accounts without stealing passwords or completing another multifactor authentication challenge. Researchers re…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A critical vulnerability in Ghostscript could allow attackers to execute code on vulnerable servers by uploading a specially crafted PDF containing a malicious JPEG 2000 image. Tracked as CVE-2026-39919, the vulnerability is a heap-based buffer overflo…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A recently released exploit package lets the third-generation Amazon Fire TV Cube gain an unlocked bootloader and persistent root access on firmware version PS7717 or earlier. Developed by XDA developer Pro-me3us, the project targets devices codenamed …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Progress has disclosed 31 vulnerabilities in MarkLogic Server that could lead to privilege escalation, server-side code execution, authentication bypass, credential exposure, and data compromise. In its security bulletin dated October 12, 2026, the com…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A Kimsuky campaign that delivers Funhouse ransomware through a malicious Hangul document disguised as a resume. The operation combines embedded OLE objects, sequential scripts, a Python backdoor, and Quasar RAT, linking the September 2026 activity to e…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
SonicWall released security updates to address four vulnerabilities in its SMA 1000 series appliances, including a critical server-side request forgery (SSRF) flaw rated 10.0. These vulnerabilities could allow unauthorized operations, operating system …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
MariaDB maintainers have disclosed ten vulnerabilities affecting database server components, Linux packaging, and Connector/C. Under specific conditions, these flaws could lead to remote code execution, privilege escalation, unauthorized table access, …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A sophisticated campaign in which threat actors posed as a Web3 venture-capital accelerator to target cryptocurrency start-ups, developers and founders with free Claude and Gemini credits, AI coding tools and smart-contract security audits. It claimed …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Ubuntu and Canonical’s websites experienced a sustained DDoS attack, disrupting access to public websites and security information services for four hours and 12 minutes. The issue has since been resolved. Notably, Ubuntu repositories, installati…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly reported macOS implant tracked as GhostProfile clones browser profiles and remotely operates concealed copies of Chrome or Firefox, allowing attackers to browse using victims’ authenticated sessions. The researchers described it as a hidden-VNC…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
