Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed

September 9, 2026 at 12:17PM The security researcher known as Chaotic Eclipse has dropped a proof-of-concept (PoC) for yet anothe…

SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution

September 9, 2026 at 11:55AM SAP has released security updates to address multiple vulnerabilities, including a maximum-severity …

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

September 9, 2026 at 10:11AM Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabiliti…

N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

September 9, 2026 at 09:57AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity…

BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams

September 8, 2026 at 02:13PM Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poi…

Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing

September 8, 2026 at 12:30PM Online dating app Grindr has opted to pay £26 million ($35.1 million) to settle a lawsuit in the U.K…

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

September 7, 2026 at 11:42PM Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolk…

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

September 7, 2026 at 04:50PM A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJ…

N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw

September 7, 2026 at 02:01PM Every on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day ea…

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

September 7, 2026 at 01:23PM Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware…

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

September 6, 2026 at 02:04PM Elastic Security Labs has documented four previously unreported programs associated with REVSTEALER,…

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

September 6, 2026 at 01:44AM Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce tha…