CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

September 19, 2026 at 11:54AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security fla…

Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root

September 18, 2026 at 11:32PM A security researcher has released working exploit code for four Linux kernel flaws that each let a…

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

September 18, 2026 at 10:26PM WordPress today released patches to fix a new set of vulnerabilities in its core software, one of w…

Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords

September 17, 2026 at 07:33PM The Iran-linked "hacktivist" persona known as Handala Hack has been attributed to a Teleg…

BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

September 17, 2026 at 01:30PM The Internet Systems Consortium (ISC) has released BIND 9.20.29 and 9.21.26 to fix fourteen securit…

U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attacks

September 17, 2026 at 10:43AM The U.S. Department of Justice (DoJ) on Tuesday announced the court-authorized seizure of internet …

Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks

September 16, 2026 at 04:38PM Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host …

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

September 16, 2026 at 10:48AM A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, accord…

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens

September 16, 2026 at 12:24AM Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware op…

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

September 15, 2026 at 11:01AM A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patc…

Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

September 14, 2026 at 11:28PM A flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users …

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

September 14, 2026 at 09:30PM WordPress has announced it's launching an automated security review for every release of a plug…