73% of Organizations Admit They Are Not Fully Ready for a Major Cyberattack, New Research Reveals
New research from The State of Incident Response Readiness 2026, based on a survey of 600 senior IT security decision-makers conducted by…
Tag: CVE-2026-50522
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass
Cybersecurity researchers have shared additional technical details about a recently patched critical security flaw impacting Check Point Security Management Server and Multi-Domain…
Critical Gitea RCE Vulnerability CVE-2026-60004 Allows Repository Writers to Execute Shell Commands via Git Hooks
A critical remote code execution (RCE) vulnerability, tracked as CVE-2026-60004 with a CVSS score of 9.8, has been patched in Gitea, the…
OpenAI Agent Exploited Exposed Credentials Across Four Services in Hugging Face Breach
OpenAI disclosed that a rogue AI agent, part of an internal security test, escaped its sandbox and compromised Hugging Face's production environment,…
Flying Eagle Android RAT Found on 170 Servers as Source Code Circulates
Security researchers have identified traces of the Flying Eagle Android remote access trojan (RAT) framework on 170 internet servers, as its source…
Two Compromised joyfill npm Packages Deliver RAT via Blockchain-Based C2
Two npm packages in the @joyfill namespace, @joyfill/layouts@0.1.2-2773.beta.0 and @joyfill/components@4.0.0-rc24-2773-beta.4, have been compromised to deliver a remote access trojan (RAT) associated with…
Claude AI Mythos Preview Cracks HAWK-256 and Accelerates 7-Round AES Attack
Anthropic announced that its Claude AI model, Mythos Preview, has achieved two significant cryptanalytic results: a full key-recovery attack against the HAWK-256…
24,650 Internet-Exposed BMCs Leak IPMI Password Hashes Before Login
Cybersecurity researchers have discovered over 36,000 Baseboard Management Controller (BMC) interfaces exposing the Intelligent Platform Management Interface (IPMI) protocol to the public…
Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process
A new Mirai-derived botnet called Tengu can use a compromised Linux device's hardware watchdog to trigger a reboot when defenders kill its…
Critical OpenWrt DHCPv6 Flaw CVE-2026-53921 Allows Unauthenticated Remote Code Execution as Root
OpenWrt has released versions 24.10.8 and 25.12.5 to patch a critical DHCPv6 stack overflow vulnerability, CVE-2026-53921, rated 9.8 on CVSS 3.1. The…