BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

October 24, 2026 at 12:20AM Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible…

Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions

October 23, 2026 at 11:20PM Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem …

Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

October 23, 2026 at 12:35AM Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), …

Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

October 22, 2026 at 10:31PM Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly report…

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed

October 22, 2026 at 12:04PM Amazon's Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly d…

China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack

October 22, 2026 at 09:51AM Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the re…

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

October 22, 2026 at 12:27AM GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed serve…

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

October 21, 2026 at 11:31PM The popular LiteLLM Python package has been compromised as part of a software supply chain attack tha…

Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion

October 21, 2026 at 11:35AM A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare …

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

October 21, 2026 at 10:27AM PHP will ship an out-of-cycle security release at 14:00 UTC today, October 21, for two critical vulne…

Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software

October 20, 2026 at 10:39PM The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromise…

ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan

October 20, 2026 at 12:41PM Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said …