Category: Cyber Security
-
Security researchers demonstrated 32 zero-day vulnerabilities on the opening day of Pwn2Own Ireland 2026, earning a combined $388,500. Successful demonstrations targeted smartphones, AI systems, printers and smart home equipment. The results show how security weaknesses can affect both everyday connected devices and newer AI platforms. However, some demonstrations involved bugs already known to vendors, meaning…
-
Atlassian has released security updates for a critical vulnerability affecting several self-hosted products, including Jira, Confluence and Bitbucket. The Atlassian file-access flaw, tracked as CVE-2026-21589, allows unauthenticated attackers to access specific files within an application’s web root directory. However, exploitation requires advance knowledge of the target file’s exact name and path. The vulnerability does not…
-
A former infrastructure engineer has received a 32-month prison sentence after locking administrators out of thousands of devices on his employer’s network. The engineer extortion sentence follows a failed attempt to demand 20 bitcoin, worth approximately $750,000 at the time. Daniel Rhyne, 57, of Kansas City, Missouri, pleaded guilty over the attack against an industrial…
-
Attackers are scanning for a critical Rejetto HFS vulnerability that could let them forge administrator sessions and execute code remotely. Security researchers have detected probes targeting the flaw, although they have not disclosed successful compromises. Tracked as CVE-2026-61500, the weakness affects Rejetto HFS versions 3.0.0 through 3.2.0. The open-source HTTP File Server supports self-hosted file…
-
Italy’s data protection authority has fined IQVIA €7 million, approximately $7.8 million, over its handling of patient information. The IQVIA data privacy fine follows findings that health records described as anonymous could still allow individuals to be identified. The regulator, known as GPDP, examined a database containing information about roughly one million patients. IQVIA’s Italian…
-
Dell has released fixes for a critical Dell System Update flaw that could let unauthenticated remote attackers execute code with root privileges. The company urges customers to upgrade promptly, warning that successful exploitation could compromise the application and its underlying operating system. The vulnerability, tracked as CVE-2026-86360, affects Dell System Update (DSU), a command-line deployment…
-
The alleged developer of Ploutus ATM malware has appeared in a Nebraska federal court following his arrest. US authorities accuse Anibal Alexander Canelon Aguirre of helping lead a scheme that stole millions from cash machines. Canelon Aguirre, 50, also uses the names “Prometheus” and “The Engineer,” according to investigators. Prosecutors link the alleged operation to…
-
Vercel has confirmed a KVM zero-day discovered through its Sandbox bug bounty program. Security researcher Paulos Yibelo says the vulnerability allowed him to escape a guest virtual machine and obtain root access on the host. The finding raises concerns about isolation between cloud workloads. However, public disclosures do not yet identify affected software versions, the…
-
Microsoft has confirmed that the KB5124010 update can cause certain Windows 11 games and applications to crash. The issue affects software that relies on Windows’ built-in AC-3 audio decoding, commonly associated with Dolby Digital sound. Affected programs may fail to open or close unexpectedly. In other cases, they work normally until a particular action, such…
-
Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Rewards Program (OSS VRP). The Google bug bounty change follows a sharp increase in automated submissions, most of which the company says are invalid. However, the suspension covers only part of the program. Supply chain reports remain eligible, and Google will…