4+ day, 5+ hour ago   (367+ words) Palo Alto Networks has disclosed a high-severity buffer overflow vulnerability in PAN-OS that could allow unauthenticated, network-based attackers to execute arbitrary code with root privileges on PA-Series hardware firewalls. Tracked as CVE-2026-0310, the flaw affects XML processing functionality in PAN-OS…...

4+ day, 10+ hour ago   (229+ words) A rapidly adopted exploit kit, dubbed BlueMoon, chains Chrome and Microsoft Windows zero-days to compromise targets in espionage-focused phishing campaigns. Most observed activity has been linked to China-aligned clusters, although researchers cautioned that the toolkit cannot yet be attributed exclusively…...

6+ day, 11+ hour ago   (398+ words) Mathspace, a mathematics learning platform used by schools in Australia and New Zealand, has disclosed a data breach affecting 1,079,819 students, parents or guardians, teachers, and employees. The incident stemmed from the exploitation of a critical vulnerability in a self-hosted Metabase…...

1+ week, 10+ hour ago   (220+ words) The activity follows PaperCut’s August 27 disclosure of active exploitation. CVE identifiers were assigned the next day, while CISA added both flaws to its Known Exploited Vulnerabilities catalog on August 31. The observed intrusion chain begins with exploitation of exposed PaperCut servers,…...

1+ week, 11+ hour ago   (425+ words) The attacks primarily target devices with SSH management access exposed to public networks, prompting urgent patching guidance from MikroTik, CERT Polska, and Latvia’s CERT.LV. MikroTik released security updates on September 3, confirming that fixed RouterOS builds are available through supported…...

1+ week, 2+ day ago   (360+ words) Tracked as CVE-2026-6471, the flaw was discovered by Cyera Research and affects PostgreSQL versions dating back to 9.4, released in 2014. PostgreSQL addressed the issue in its August 22, 2026 security release, ending a vulnerability window that spanned roughly 12 years. The bug exists in…...

1+ week, 5+ day ago   (362+ words) A newly analyzed server linked to the ransomware group The Gentlemen contained a previously undocumented command-and-control (C2) framework called TukTuk, tools designed to disable endpoint security products, and data believed to have been stolen from two global companies. Threat intelligence researchers…...

1+ week, 6+ day ago   (292+ words) Threat actors are actively exploiting two critical remote code execution vulnerabilities affecting Langflow and Ruby on Rails. The flaw lies in the code-validation path, where insufficient validation of a user-supplied parameter before it is used to execute Python can allow…...

1+ week, 6+ day ago   (349+ words) The npm package @7nohe/openapi-react-query-codegen, which receives roughly 150,000 weekly downloads, has been compromised by a malicious campaign linked by researchers to the Mini Shai-Hulud activity. The Socket Threat Research Team found that attackers published 10 malicious versions of the package on August…...

2+ week, 4+ hour ago   (349+ words) A new Metasploit Framework module is poised to make a recently disclosed, actively exploited PaperCut NG and MF zero-day chain more accessible. The development arrives days after PaperCut confirmed customer incidents. Every PaperCut NG and MF version may be affected....