Security News & Blog

The analysis of Fast16 shows that cyber sabotage against industrial and scientific systems predates Stuxnet and has been far more specialized than many organizations assume. Unlike generic malware, Fast16 was reportedly…

The public exploit for DirtyDecrypt raises the urgency for Linux administrators because this is no longer just a theoretical kernel flaw. The vulnerability is a local privilege escalation issue in the Linux kernel’s rxg…

The MiniPlasma Windows zero-day is a serious reminder that endpoint compromise does not end at initial access. Once an attacker gains a foothold on a Windows system, local privilege escalation flaws can turn limited acc…

Tycoon2FA’s use of Microsoft 365 device-code phishing shows how attackers are adapting to bypass traditional MFA expectations without needing to steal passwords directly. By tricking users into entering an attacker-gene…

The active exploitation of CVE-2026-42945 in NGINX should be treated as an urgent infrastructure risk, especially for internet-facing web servers and reverse proxies. The flaw is a heap buffer overflow in ngx_http_rewri…

CISA adding CVE-2026-42897 to the Known Exploited Vulnerabilities catalog should be treated as an immediate priority signal for every organization running on-premises Microsoft Exchange. The vulnerability affects Exchan…

The active exploitation of the Funnel Builder plugin is a serious warning for WooCommerce store owners because this flaw directly impacts checkout security and customer payment data. The vulnerability affects Funnel Bui…

The active exploitation of the Funnel Builder WordPress plugin is a serious warning for WooCommerce site owners because this is not just a website defacement risk, it directly targets payment data. The flaw affects plug…

CISA adding CVE-2026-42897 to the Known Exploited Vulnerabilities catalog should be treated as an immediate priority signal for every organization running on-premises Microsoft Exchange. The vulnerability affects Exchan…

The four OpenClaw vulnerabilities, collectively called “Claw Chain,” show why AI agent platforms must be secured as high-privilege execution environments, not treated like ordinary productivity tools. The flaws can be c…

The compromise of the popular node-ipc npm package is another serious reminder that software supply-chain attacks are now directly targeting developer workstations and CI/CD environments. The affected versions, includin…

The malicious Node-IPC versions are another sharp reminder that open-source package repositories are now part of the enterprise attack surface. Three newly published node-ipc versions, reportedly 9.1.6, 9.2.3, and 12.0.…