Calix Flaws
Overview A critical vulnerability in Calix GS7 XGS (GS5239XG) residential routers, widely deployed by U.S. broadband providers, allows attackers to bypass NAT and firewall protections […]
Month: August 2026
Oracle HTTP and WebLogic Server Vulnerability
Overview The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE‑2026‑21962 to its Known Exploited Vulnerabilities (KEV) Catalog, confirming that attackers are actively exploiting […]
WordPress Sites Attacked
Overview Hackers are actively exploiting two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On (SSO) plugin for WordPress, tracked as CVE‑2026‑61979 […]
Microsoft Teams Phished
Overview A new phishing campaign targeting Microsoft Teams is delivering a malware family called SynkLoader, designed to steal Windows passwords and provide attackers with persistent […]
Microsoft’s August Updates Causes Disruption
Overview Microsoft has confirmed that the August 2026 Patch Tuesday .NET Framework updates are causing printing and PDF export failures in applications built with the […]
Mac Users Tricked
Overview Mac users are being targeted by a ClickFix campaign that disguises itself as a routine CAPTCHA check. Instead of downloading an app, victims are […]
ToxicPanda Android Malware
Overview The ToxicPanda Android malware has evolved into ToxicPanda 2.0, expanding its reach to 349 targeted applications and supporting 167 remote commands. According to Zimperium, […]
Zimbra RCE Vulnerability
Overview CERT Polska has issued an urgent warning: attackers are actively exploiting a critical remote code execution (RCE) vulnerability in the Zimbra Collaboration Suite, tracked […]
Claude AI Finds SAML Security Flaws
Overview Security researchers at Oblique Security have leveraged Anthropic’s Claude AI to uncover serious flaws in Security Assertion Markup Language (SAML) implementations. These weaknesses could […]
Malicious Firefox Extensions
Overview Security researchers at Socket Threat Research have uncovered a campaign dubbed Offside Wallet Theft Factory, involving 40 malicious Mozilla Firefox extensions masquerading as legitimate […]