1+ day, 12+ hour ago   (444+ words) A newly disclosed vulnerability in Plesk Backup Manager could allow low-privileged users to escalate privileges and gain full root access on affected Linux servers. Tracked as CVE-2026-68488, the flaw stems from a symlink race condition during subscription-content restore operations. The…...

4+ day, 6+ hour ago   (351+ words) The flaw affects FortiOS, FortiSwitchManager, and FortiSASE products. It could allow attackers to execute unauthorized code or commands by sending specially crafted packets. CVE-2025-25249 is a heap-based buffer overflow vulnerability. A heap overflow occurs when an application writes more data…...

4+ day, 6+ hour ago   (414+ words) Palo Alto Networks has disclosed a high-severity PAN-OS vulnerability that could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on affected PA-Series hardware firewalls. Tracked as CVE-2026-0310, the flaw exists in XML processing, and the vendor…...

5+ day, 3+ hour ago   (310+ words) A critical cross-site scripting vulnerability in the widely used MapLibre GL JS library could expose applications and an estimated 2.7 million users to zero-click attacks. This created an index-shifting condition: once an attribute was removed, the next attribute moved into its…...

6+ day, 5+ hour ago   (628+ words) A new intrusion campaign shows how quickly a Windows domain can be turned into a launchpad for deeper compromise. The operators used a Sliver command-and-control beacon, account creation, credential theft and remote administration to establish control after gaining an initial…...

1+ week, 2+ hour ago   (668+ words) A stealthy Linux rootkit is giving attackers a new way to keep control of compromised F5 BIG-IP Access Policy Manager servers. Instead of leaving an obvious malicious PHP file behind, it places a web shell only in the memory used by…...

1+ week, 4+ hour ago   (642+ words) A new Windows attack shows how a trusted program can become a path to sensitive system functions. The method, called Bring Your Own Trusted Caller, or BYOTC, turns a legitimate user-mode application into the tool that asks a privileged driver…...

1+ week, 3+ hour ago   (616+ words) A new Linux bot called Tengu is built to stay hidden and turn compromised systems into tools for disruption. The 32-bit malware poses as a routine kernel worker, persists across several Linux setups, and can generate traffic floods against selected…...

1+ week, 5+ hour ago   (611+ words) South Korean automotive and media organizations have been hit by a quiet Linux intrusion toolkit built for long-term access. The malware hides inside software that manages web traffic, allowing attackers to watch users, steal information, and change pages delivered through…...

1+ week, 9+ hour ago   (1524+ words) Macs get malware. Not as much as Windows, but the volume of macOS infostealers harvesting browser credentials, crypto wallets, and keychain data has grown sharply, and they arrive through cracked software, fake installers, and malicious ads rather than exploits. Bitdefender…...