Cybersecurity
News
ShinyHunters renew Oracle PeopleSoft attacks via WAF bypass
Google warns of renewed mass exploitation of CVE-2026-35273 in Oracle PeopleSoft by ShinyHunters-linked group UNC6240Attackers bypass WAF rules using URL-encoded paths, deploying web shells...
News
Bitget hacked: $351.6M stolen by North Korea
Bitget lost $351.6 million from hot and warm wallets on September 24, 2026, in an attack attributed to North Korean hackers.The exchange confirmed cold...
News
Placeholder domain third-party.com now serves ClickFix malware
The long-trusted documentation placeholder domain "third-partycom" has been weaponized to serve a ClickFix malware lure to Windows users.Unlike "examplecom," the domain was not IANA-reserved...
News
Critical WordPress RCE bug actively exploited within hours
Threat actors are actively exploiting a critical WordPress vulnerability, CVE-2026-87902, just hours after its public disclosure.The unauthenticated remote code execution (RCE) flaw carries a...
News
MikroTik SSH flaws chained for full router takeover
A chain of two SSH vulnerabilities—CVE-2026-67279 and CVE-2026-86060—allows unauthenticated attackers to gain full administrative control over exposed MikroTik RouterOS devices.Active exploitation began before patches...
News
MemTensor npm, PyPI packages push credential-stealing malware
Compromised MemTensor packages on npm and PyPI delivered the Go-based sckit implant across Windows, Linux, and macOS.Attackers stole publish tokens from MemTensor’s GitHub Actions...
News
Next.js Critical Flaw in ImageResponse Allows Server RCE
A critical vulnerability (CVE-2026-94545, CVSS 9.5) in Next.js versions 16.2.0 through 16.3.5 allows remote code execution via the ImageResponse feature when running on the...
News
Critical AI Gateway Bug Allows Unauthenticated RCE
A critical unauthenticated remote code execution vulnerability (CVE-2026-90898, CVSS 9.8) affects all versions of the open-source AI gateway Bifrost before 2.1.0.A second flaw (CVE-2026-86242,...
Latest news
Russian Finance Ministry pays staff wages in digital rubles for first time
The Ministry of Finance paid some employees in digital rubles for the first time in early October.The voluntary salary...
Saylor: Strategy’s STRC volatility below S&P 500 ETF at 9%
Strategy's STRC preferred stock posted 30-day historical volatility of 9%, below the SPDR S&P 500 ETF Trust's 10%Michael Saylor...
MI5 Warns 100+ UK Academics Aided China Spy AI Research
MI5 issued an unprecedented alert warning over 100 U.K.-linked academics contributed to research funded by China's Ministry of State...
