-
Cisco has released security updates that address a critical vulnerability in the Remote Access SSL VPN service on its Secure Firewall Adaptive Security Appliance (ASA) and Threat Defense (FTD) software. This vulnerability, tracked as CVE-2026-76418, le…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
INJ3CTOR3 has expanded its FreePBX toll-fraud campaign with automated credential theft, letting attackers keep billing unauthorized calls to victims even after infected servers are cleaned. September 2026 artifacts described in the supplied research sh…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
CISA has added CVE-2026-111497, a critical vulnerability in Google Brotli that affects Node.js, to its Known Exploited Vulnerabilities catalog following confirmed evidence of exploitation. Added on October 27, 2026, this flaw allows unauthenticated att…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Security researchers have demonstrated an attack chain against Cloudflare’s Image Transformations service that bypasses SVG sanitization and Content Security Policy (CSP), enabling malicious JavaScript execution on a targeted website’s origin. Publishe…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Security researchers at OffensiveCon Japan 2026 explored topics including Chrome sandbox escapes, zero-click attack surfaces in Telegram, and newly discovered iOS zero-day vulnerabilities. This two-day program took place on October 27–28. The published…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Attackers are using compromised websites to present fake Cloudflare verification pages that steer Windows and macOS users toward executing malicious commands. The findings establish a delivery attempt, not a confirmed infection or identified malware fa…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
WordPress has released version 7.1.4 to address 22 vulnerabilities, including issues related to remote code execution, stored cross-site scripting, information disclosure, and authorization weaknesses. This security update was published on October 28, …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
CyberDakait, a financially motivated Android malware operation targeting Indian banking customers since July 2025. Researchers identified at least 17,960 compromised devices and 7,611,443 intercepted SMS messages, exposing a campaign that combines bank…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly disclosed data leak has exposed personal and professional information on more than 40,000 U.S. Department of Homeland Security employees, including personnel in surveillance, human intelligence, and undercover operations. Distributed Denial of …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers chained PHP2Shell vulnerabilities with a Linux kernel privilege escalation flaw to gain root access on 25 servers, including three systems associated with a United States government-affiliated environment, according to Dream researchers. Discov…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
