U.S. CISA adds Ubiquiti UniFi OS and Lantronix EDS5000 plugin flaws to its Known Exploited Vulnerabilities catalog

3 months ago

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ubiquiti UniFi OS and Lantronix EDS5000 flaws to its Known Exploited Vulnerabilities…

FortiBleed: The Broker Who Turned 73,000 Firewalls Into a Product Catalog

3 months ago

FortiBleed exposed valid credentials for 73,000+ Fortinet firewalls, revealing a large-scale access-brokering operation targeting organizations worldwide. In mid-June 2026, researcher…

One Railway Radio Outage Stopped Trains Across Germany and Nobody Knew Why

3 months ago

A nationwide GSM-R outage stopped trains across Germany, exposing how one aging communications system can still bring an entire rail…

Samsung KNOX Kernel UAF Exposes Millions of Galaxy Devices

3 months ago

Samsung’s KNOX flaw (CVE-2026-20971) is a kernel UAF in PROCA/FIVE that can enable corruption via a race; Samsung patched it…

DifyTap: Four Bugs Put over 1 million AI Apps at Risk

3 months ago

Four flaws in Dify exposed cross-tenant data, documents and AI conversations. Two critical bugs enabled unauthenticated access and data theft.…

Xsolis Data Breach Impacts 1.4 Million People

3 months ago

Xsolis disclosed a breach affecting 1.4M people after a phishing attack exposed personal and health data from its hospital clients’…

ShapedPlugin Supply Chain Attack Backdoors Pro Plugin Updates

3 months ago

Attackers backdoored ShapedPlugin Pro updates, deploying malware that steals credentials, 2FA secrets, and grants full site access. If you installed…

Squidbleed: 29-Year-Old Squid Bug Leaks User Credentials

3 months ago

Squidbleed is a 29-year-old Squid Proxy flaw that can leak credentials, tokens, and other users' HTTP data through a memory…

WhatsApp Malware Campaign Hijacks Trust, Installs Legitimate Admin Tools

3 months ago

WhatsApp accounts were hijacked to spread fake debt notices that install remote access software, giving attackers control of victims' PCs.…

Texas Parks & Wildlife (TPWD) Data Breach impacts 3 Million People

3 months ago

Texas Parks and Wildlife Department (TPWD) breach exposed data of 3M people via a third-party license vendor, including sensitive personal…

This website uses cookies.