Cybersecurity

CISA added CVE-2026-86218, a maximum-severity static code injection vulnerability in N-able N-central, to its Known Exploited Vulnerabilities catalog.The flaw, rated CVSS 10.0, allows pre-authentication...

Hackers claiming to be white hats withdrew nearly 4,000 BTC from Liquid Network on September 6, then returned 3,400 BTC the next day.The remaining...

Adobe patched CVE-2026-75650 (CVSS 10.0), a zero-day in Commerce and Magento Open Source exploited since September 4, 2026.The "StyleSmuggler" flaw enables unauthenticated remote code...

Researchers at SOCRadar uncovered a Chrome/Edge post-exploitation toolkit called PEEP that masquerades as a "Smart Bookmarks" extension.The malware bypasses Web Store checks by forging...

Cybersecurity researchers have unveiled JSCeal, a sophisticated compiled V8 JavaScript malware used to steal credentials and intercept traffic.A related malvertising campaign named SourTrade delivers...

Attackers are exploiting a critical vulnerability in MikroTik RouterOS that grants full administrative control via SSH without authentication.Successful attacks have been observed since at...

JetBrains urges Cadence users to immediately revoke and rotate all credentials after attackers exploited a critical TeamCity vulnerability (CVE-2026-63077) to breach its environment.The intrusion...

Microsoft has identified a high-volume phishing campaign using invisible Unicode tag characters to bypass email security filters.Dubbed "ASCII Smuggling," the technique conceals financial lure...