WordPress RCE Exploitation
Overview Attackers began actively probing a newly patched WordPress remote code execution vulnerability within hours of the release of WordPress 7.1.4, demonstrating just how quickly […]
Month: October 2026
When a DevOps Device Becomes the Path to Billions
Overview Binance has disclosed a major security incident involving approximately $6.3 billion in affected digital assets, with nearly $3 billion frozen on-chain so far. The […]
Hugging Face Malware
Overview A malware campaign targeting Hugging Face model repositories has returned with a more persistent approach, abusing AI model-loading functionality to install cryptocurrency miners and […]
When Answering a Voice Call Becomes the Attack Trigger
Overview A vulnerability in Telegram for Android could allow an attacker to execute code on a victim’s device simply after the victim answered a Telegram […]
FreePBX Malware
Overview Attackers targeting FreePBX and related VoIP platforms have upgraded their malware to steal the credentials that control an organisation’s telephone services, potentially allowing phone […]
Cisco SD-WAN Zero-Day
Overview A critical vulnerability in Cisco Catalyst SD-WAN has been exploited to deploy custom malware capable of harvesting encryption keys used to protect communications between […]
Sony ISP Data Breach
Overview Sony Network Communications, a Sony Group subsidiary and internet service provider in Japan, has confirmed a data breach involving approximately 2.5 million customer records. […]
When Trusted Access Becomes a Root-Level Attack Path
Overview Tailscale has released version 1.104.4 to address several security flaws in its built-in SSH and networking functionality, including vulnerabilities that could allow an attacker […]
UNM Health Ransomware Attack
Overview A cyberattack against the University of New Mexico Health Sciences Center has disrupted patient care, surgeries, appointments and university operations, demonstrating just how quickly […]
Apple Backports CoreGraphics Zero-Day
Overview Apple has extended protection against a previously exploited CoreGraphics zero-day to a number of older iPhones and iPads, highlighting an important reality of endpoint […]