Category: Cyber Security
-
Arista Networks has released security updates for a VeloCloud Orchestrator zero-day that attackers are actively exploiting. The critical vulnerability affects on-premises deployments and allows authenticated users with basic privileges to gain powerful administrative access. Tracked as CVE-2026-114625, the flaw involves SQL injection through the VeloCloud Orchestrator web interface. Exploitation requires a valid authenticated session but…
-
Amazon Threat Intelligence detected PHP2Shell exploitation attempts on October 17, four days before developers released security patches. However, researchers have not established whether those early attempts could successfully compromise real-world systems. The two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, can allow remote code execution on vulnerable PHP installations. The PHP security team released fixes on October…
-
GitLab has released emergency security updates to address a maximum-severity vulnerability that could let remote attackers execute arbitrary code. The GitLab code execution flaw affects its Community Edition (CE) and Enterprise Edition (EE). Tracked as CVE-2026-110264, the vulnerability involves an integer overflow in the platform’s Regular Expression Compiler. Under certain conditions, an attacker could exploit…
-
Operation Serengeti III has disrupted 10,909 malicious networks and led to the arrest of 1,462 suspected cybercriminals across Africa. The Interpol-coordinated crackdown targeted business email compromise, ransomware and online fraud. Authorities from 21 countries participated in the operation between June 29 and August 31. Together, they recovered more than $105 million in illicit funds. Investigators…
-
Chrome scam protection is expanding with Gemini-powered website analysis and warnings about suspicious commands used in ClickFix attacks. The features form part of Enhanced Protection, the browser’s optional Safe Browsing security setting. Google is also introducing a warning for websites that display deceptive behavior but fall below the threshold for a full-page danger alert. Together,…
-
The Richmond schools cyberattack disrupted technology across 53 campuses after ransom threats appeared on staff laptops. Virginia’s Richmond Public Schools took its network offline on October 21 while investigating the intrusion. The district serves approximately 22,000 students. However, officials have not confirmed the attackers’ claims that they stole sensitive information, and the extent of any…
-
A Lazarus malware campaign uses post-quantum cryptography to protect malicious payload delivery during attacks against South Korean organizations. Researchers named the operation FlashHole and linked it to the North Korean hacking group. The campaign combines established malware with newly identified tools and relies heavily on execution in memory. Meanwhile, its delivery process uses ML-KEM-1024, a…
-
Plex2Shell attacks are targeting Plex Media Server through a chain of four vulnerabilities, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). Together, the flaws allow attackers to obtain the server owner’s administrator token and execute code with elevated privileges. CISA has directed federal agencies to patch affected systems or apply mitigations by October…
-
Attackers are using stolen UpdraftCentral keys to install malicious plugins and gain administrator access to WordPress websites. The campaign follows a breach of TeamUpdraft’s infrastructure that potentially exposed customer records and remote management credentials. TeamUpdraft discovered unauthorised access during October 17–18. Meanwhile, security researchers reported attacks against connected websites beginning on October 18 at 15:32…
-
The eMudhra certificate compromise has triggered protective measures across major browsers after researchers discovered eight intermediate certificates with easily recoverable private keys. The weakness could allow attackers to forge certificates for legitimate websites and potentially intercept encrypted traffic. eMudhra revoked the affected certificates and suspended new certificate issuance under its G3 root. However, applications with…