CVE-2026-33032: severe nginx-ui bug grants unauthenticated server access

2 months ago

An actively exploited critical nginx-ui flaw (CVE-2026-33032) lets attackers bypass authentication and take full control of Nginx servers. A critical…

U.S. CISA adds Microsoft SharePoint Server, and Microsoft Office Excel flaws to its Known Exploited Vulnerabilities catalog

2 months ago

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft SharePoint Server, and Microsoft Office Excel flaws to its Known Exploited…

Mirax malware campaign hits 220K accounts, enables full remote control

2 months ago

Mirax, a new Android RAT, spread via Meta ads, infected 220,000 users and turns devices into SOCKS5 proxies, giving attackers…

PHP Composer flaws enable remote command execution via Perforce VCS

2 months ago

Two high-severity flaws in PHP Composer could let attackers run arbitrary commands via malicious repository configs and crafted inputs affecting…

Microsoft Patch Tuesday for April 2026 fixed actively exploited SharePoint zero-day<gwmw style="display:none;"></gwmw>

2 months ago

Microsoft Patch Tuesday security updates for April 2026 fixed 165 vulnerabilities, including an actively exploited SharePoint zero-day. Microsoft Patch Tuesday…

Personal data of 1 million gym members compromised in Basic-Fit security incident

2 months ago

A breach at Basic-Fit exposed data of 1M members, including names, birth dates and bank details after unauthorized access. Basic-Fit,…

US, UK and Canada disrupt $45M crypto theft in Operation Atlantic

2 months ago

US, UK and Canada ran Operation Atlantic, uncovering $45M in crypto theft and freezing $12M to return to victims. An…

ShinyHunters claim the hack of Rockstar Games breach and started leaking data

2 months ago

Leak of 8.1GB data tied to Rockstar Games includes anti-cheat code, game data, analytics and more, reportedly exposed by ShinyHunters.…

Attackers target unpatched ShowDoc servers via CVE-2025-0520

2 months ago

A critical RCE flaw, tracked as CVE-2025-0520, in ShowDoc is being actively exploited, putting unpatched servers at serious risk. A…

U.S. CISA adds Adobe, Fortinet, Microsoft Exchange Server, and Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog

2 months ago

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Adobe, Fortinet, Microsoft Exchange Server, and Microsoft Windows flaws to its Known…

This website uses cookies.