Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

August 28, 2026 at 03:15PM cPanel has released patches for a security flaw affecting domain parking and addon domain functionalit…

APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations

August 28, 2026 at 01:50PM Cybersecurity researchers have flagged a fresh set of campaigns targeting government and diplomatic or…

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face

August 28, 2026 at 12:06AM OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (…

New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access

August 27, 2026 at 01:43PM Academic researchers have disclosed a Rowhammer attack impacting NVIDIA workstation GPUs with GDDR6 me…

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs

August 27, 2026 at 12:35PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added six flaws to its K…

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

August 26, 2026 at 09:05PM Cybersecurity researchers have discovered additional infrastructure and previously undocumented malwar…

Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode

August 26, 2026 at 12:42PM An independent malware researcher has documented a previously unreported Windows backdoor, dubbed SLEE…

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

August 26, 2026 at 11:17AM Cybersecurity researchers have disclosed details of a phishing-as-a-service (PhaaS) platform built to …

U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches

August 25, 2026 at 11:47PM The U.S. Department of the Treasury has announced fresh sanctions on Iranian cyber actors as part of w…

Frontier AI: Vulnerability Management's Systemic Revolution

August 25, 2026 at 04:44PM Vulnerability management has been a staple of security programs since the dawn of the cybersecurity di…

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

August 25, 2026 at 02:04PM Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurif…

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

August 25, 2026 at 11:42AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity se…