Skip to content

ADMIN.FOUNDATION

  • Ivanti Connect Secure CVE-2026-104935 Flaw Enables Unauthenticated Remote Code Execution

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    Ivanti released security updates for Ivanti Connect Secure (ICS) to address CVE-2026-104935, a high-severity authentication-bypass vulnerability. This vulnerability allows remote, unauthenticated attackers to execute arbitrary commands. The company disclosed the issue on October 13, 2026. It confirmed that exploitation had affected a limited number of customers at the time of disclosure. Fixed software versions are […]

    The post Ivanti Connect Secure CVE-2026-104935 Flaw Enables Unauthenticated Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers Chain 3 Ivanti VPN Zero-Days to Gain Root Access Without Authentication

    ·

    cyber security, Cyber Security News, zeroday

    Attackers chained three zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances to execute commands as root without authentication, then searched the affected network for credentials and sensitive Active Directory data. Volexity attributed the activity to an unknown threat actor it tracks as UTA0576, which repeatedly exploited an appliance running version 22.8R2.4, Build 19097 the […]

    The post Hackers Chain 3 Ivanti VPN Zero-Days to Gain Root Access Without Authentication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Zoom Certificate Validation Vulnerability Allows Attackers to Access Sensitive Information

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    Zoom has disclosed a high-severity vulnerability in the My Notes feature that affects multiple Zoom Workplace clients. This issue, tracked as CVE-2026-108185, could allow an unauthenticated attacker with network access to disclose sensitive information. On October 13, 2026, Zoom published security bulletin ZSB-26022, which identifies the vulnerable releases across Windows, macOS, Linux, Android, and iOS, […]

    The post Zoom Certificate Validation Vulnerability Allows Attackers to Access Sensitive Information appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update

    ·

    AI, cybersecurity, Microsoft, Patch Tuesday, Security, vulnerability, Windows
    Microsoft addressed 1,413 security vulnerabilities in its October 2026 Patch Tuesday update, making it the company’s largest monthly…

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Critical Docker Hub Vulnerability Lets Attackers Impersonate Users and Tamper With Container Images

    ·

    CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability

    Docker disclosed a critical vulnerability in Docker Hub that let attackers impersonate other users at the container registry level. This flaw, tracked as CVE-2026-105445 and dubbed GhostPat, exploited how Docker handled personal access tokens during account conversions. Depending on token permissions, it could enable unauthorized image downloads, malicious image uploads, and repository image deletions. Docker […]

    The post Critical Docker Hub Vulnerability Lets Attackers Impersonate Users and Tamper With Container Images appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Meta Removes 3.7 Million Scam Accounts as 28 Arrested in Global Crackdown

    ·

    cyber security, Cyber Security News

    Meta removed more than 3.7 million Facebook and Instagram accounts, Pages, and Groups during an international crackdown on West African scam networks that resulted in 28 arrests and the rescue of 117 trafficking victims. Announced October 13, the operation combined platform enforcement, financial tracing, and physical raids against fraud infrastructure targeting victims worldwide. Meta and […]

    The post Meta Removes 3.7 Million Scam Accounts as 28 Arrested in Global Crackdown appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

    ·

    A flaw in Linux’s vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host’s memory and hijack the program that runs the virtual machine. The bug is tracked as CVE-2026-74580 and named Vghost. Tencent Zhuque Lab, which found the

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers Target PuTTY Users With SEO Poisoning and Ethereum-Powered Malware

    ·

    cyber security, Cyber Security News, Malware

    A search for PuTTY can lead to more than a fake download. In a campaign reported on October 12, attackers used search-engine optimization (SEO) poisoning to steer users to a counterfeit PuTTY site and deliver a trojanized Windows installer. The campaign targets people searching Google for “PuTTY” or “PuTTY download.” A high-ranking result leads to […]

    The post Hackers Target PuTTY Users With SEO Poisoning and Ethereum-Powered Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Windows Shell Zero-Day Lets Attackers Bypass Mark of the Web Security Protections

    ·

    cyber security, Cyber Security News, vulnerability, Windows

    Microsoft has addressed a vulnerability in Windows Shell that attackers are actively exploiting, allowing them to bypass the Mark of the Web (MOTW) security protections. Designated CVE-2026-96951, the flaw was disclosed on October 13, 2026, during the company’s monthly security update. Microsoft classifies the vulnerability as Important, giving it a CVSS v3.1 base score of […]

    The post Windows Shell Zero-Day Lets Attackers Bypass Mark of the Web Security Protections appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • TFG London Confirms Cyberattack Affecting Hobbs, Whistles, and Phase Eight

    ·

    Cyber Attack, cyber security, Cyber Security News

    TFG London has confirmed a cybersecurity incident affecting the IT systems that support its brands Hobbs, Whistles, and Phase Eight. Several of these systems remain unavailable. The parent company, The Foschini Group, disclosed the incident in a stock exchange announcement on October 13, 2026, after its UK business identified the security disruption on October 11. […]

    The post TFG London Confirms Cyberattack Affecting Hobbs, Whistles, and Phase Eight appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 74 75 76 77 78 … 1,273
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence