CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware

July 7, 2026 at 12:10PM Several versions of firmware released by Chinese network device manufacturer Tenda have been found to emb…

BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA

July 7, 2026 at 10:46AM BeyondTrust has released updates to address two critical security flaws affecting Remote Support (RS) and…

Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations

July 7, 2026 at 12:04AM An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security (MOIS) has been…

16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems

July 6, 2026 at 11:07PM A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corru…

New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS

July 6, 2026 at 01:43PM Cybersecurity researchers have flagged a novel Java-based remote access trojan (RAT) called QuimaRAT that…

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

July 6, 2026 at 12:03PM Scanners meant to catch malicious add-on "skills" for AI coding agents can be fooled by a few s…

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

July 4, 2026 at 04:47PM The North Korean threat actors linked to the Contagious Interview campaign have been observed publishing …

Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices

July 4, 2026 at 01:49AM Security firm runZero has disclosed seven vulnerabilities in FatFs, a small filesystem library that lets …

New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android

July 4, 2026 at 01:10AM A newly disclosed Linux kernel flaw called Bad Epoll (CVE-2026-46242) lets an ordinary user with no speci…

New Avalon Malware Framework Packs CrownX Ransomware Capabilities

July 4, 2026 at 12:25AM Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed A…

European Parliament Member Investigating Spyware Was Hacked With Pegasus

July 3, 2026 at 04:35PM A new report from the Citizen Lab has revealed that former Member of the European Parliament Stelios Koul…

PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords

July 3, 2026 at 01:33PM Cybersecurity researchers have flagged a new macOS information stealer called PamStealer that employs a s…