-
A critical authentication bypass vulnerability in Sungrow’s iSolarCloud management platform allowed researchers to access user and administrator accounts without valid passwords. This flaw potentially exposed connected solar plants, inverters, and batt…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The FBI and international cybersecurity agencies have warned about hackers linked to the Chinese government who use automated vulnerability scanning, large-scale botnets, and hands-on exploitation to steal sensitive information worldwide. A joint advis…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A threat actor published a malicious version of the tensorlake npm package on October 8, 2026, embedding a new variant of the self-replicating Shai-Hulud supply-chain worm. The compromised release, tensorlake version 0.5.144, can steal developer secret…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A proof-of-concept (PoC) exploit has been released for CVE-2026-102489, a critical vulnerability in Zammad that can expose active users’ session cookies and enable remote code execution (RCE) as the Zammad operating system user. This flaw was rep…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A critical vulnerability in LMCache allows unauthenticated attackers to execute arbitrary code against reachable multi-process deployments by exploiting unsafe Python pickle deserialization. This flaw is tracked as CVE-2026-105192 and has a CVSS score …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
16 malicious Firefox extensions that impersonate cryptocurrency wallets to intercept recovery phrases and private keys during wallet imports. Disguised as wallet portals, desktop utilities, and browser tools, the packages attempt to transmit secrets to…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Exposed directories on five servers have revealed an operational DarkSword/Coruna exploitation platform built to compromise iPhones and harvest cryptocurrency wallet secrets. Censys researchers uncovered delivery infrastructure, implants, wallet inject…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
wolfSSL has released wolfSSH version 1.6.0, which addresses five security vulnerabilities, including a critical flaw that could allow a man-in-the-middle attacker to bypass SSH host-key authentication under certain deployment conditions. The release, d…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Gitea has released version 28.0.0, addressing 20 vulnerabilities related to authentication bypass, unauthorized workflow execution, server-side request forgery, stored cross-site scripting, and denial of service. Announced on September 30, 2026, this r…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cisco has disclosed three critical vulnerabilities in its Nexus 3000 and 9000 Series switches that could allow unauthenticated remote attackers to execute arbitrary code with root privileges. Successful exploitation could crash processes, trigger devic…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
