Most recent articles by:

Deep Shah

Deep is the Co-founder at Codezeros Technology. His strong business acumen and industry knowledge in the Blockchain industry make him one of the strongest pillars at Codezeros. He comes with a rich technological and business understanding to lead. His deep understanding of Blockchain technology integration is a key component of our success at Codezeros. He also contributes to the overall vision of the company's growth and development.

FortiSIEM Critical Path Traversal Flaw Now Has PoC Exploit

Critical path traversal vulnerability CVE-2026-106173 in Fortinet FortiSIEM carries a CVSS score of 9.4 and can be exploited remotely without authentication.Horizon3.ai has released a...

Plex Media Server Vulnerabilities Exploited for Miners

Threat actors are exploiting a chain of four vulnerabilities in Plex Media Server, dubbed Plex2Shell, to deploy cryptocurrency miners and reverse proxy software.A public...

37-Year-Old Integer Overflow Chains to Root OpenBSD 7.9

Security firm Calif published a local privilege escalation exploit that achieves root access on OpenBSD 7.9 by chaining a 37-year-old integer overflow with a...

Candiru spyware hit Al Jazeera via zero-click online ads

Israeli spyware maker Candiru infected Al Jazeera devices through zero-click online ads, requiring no user interactionDiscover-Tech, an Israeli ad firm, acted as the front,...

Critical Drupal Field UI RCE: Patch Now, Uninstall Module

Drupal core’s Field UI module contains a critical remote code execution vulnerability tracked as CVE-2026-108097, rated 19 out of 25 on Drupal’s risk scale.Fixes...

GhostAction targets 30k GitHub repos in new supply chain wave

The GhostAction campaign expanded to more than 30,000 repositories and 3,000 users or organizations on Oct. 8 and 9, 2026.Attackers compromised roughly 1,900 GitHub...

CISA Urges Patching Ivanti Connect Secure Zero-Day Exploit

CISA urges immediate patching of Ivanti Connect Secure due to an actively exploited authentication bypass vulnerability, CVE-2026-104935.The zero-day allows remote unauthenticated command execution, enabling...

Norway Fines Microsoft’s Xandr $9.6M Over Grindr Data

Norway's Data Protection Authority fined Microsoft's Xandr €8.6 million ($9.62 million) for illegally sharing Grindr users' sensitive data, including sexual orientation, with advertisers via...

Must read