Cybersecurity

Security researchers at Nozomi Networks Labs discovered Tengu, a new Mirai-derived botnet that exploits Linux hardware watchdogs to reboot compromised devices when its main...

JetBrains has disclosed a critical vulnerability, CVE-2026-63077, affecting all on-premise versions of TeamCity.The flaw, with a CVSS score of 9.8, allows an unauthenticated attacker...

A maximum-severity command injection flaw (CVE-2026-16812, CVSS 10.0) in on-premises Arista VeloCloud Orchestrator (VCO) is under active exploitation.CISA has added the vulnerability to its...

The Dysphoria IoT botnet, tracked by CNCERT and XLab, now uses Ethereum Name Service (ENS) and Solana Name Service (SNS) for resilient command-and-control, making...

n8n fixed a high-severity sandbox escape (CVSS 8.7) in versions 2.31.5 and 2.32.1 that could allow authenticated workflow editors to execute OS commands on...

A previously undocumented East Asian threat actor is targeting Middle East government agencies with three new malware families: TELESHIM, MIXEDKEY, and BINDCLOAK.The TELESHIM backdoor...

SourTrade malvertising campaign targets cryptocurrency investors by assembling malware inside the victim's browser using a legitimate Bun runtime.It operates since late 2024, impersonating TradingView,...

A critical remote code execution vulnerability (CVE-2026-16723, CVSS 9.0) affects Alibaba's Fastjson library versions 1.2.68 through 1.2.83 when used in Spring Boot applications.Security firms...