NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats
Swati KhandelwalJul 24, 2026Web Security / Vulnerability Eight security flaws in NodeBB went public on Wednesday, along with the code...
KhandelwalJul
Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say
Swati KhandelwalJul 24, 2026Vulnerability / Database Security Redis shipped seven security releases on July 23 after researchers published authenticated RCE...
China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks
Swati KhandelwalJul 23, 2026Malware / Threat Intelligence An exposed Alibaba Cloud server has revealed a China-nexus operation that Group-IB tracks...
Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA
Swati KhandelwalJul 22, 2026Law Enforcement / Cybercrime German and US law enforcement have taken down the core infrastructure of Kratos,...
New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction
Swati KhandelwalJul 20, 2026Vulnerability / Endpoint Security Opening a crafted XZ archive in 7-Zip could let an attacker run code...
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
Swati KhandelwalJul 17, 2026Vulnerability / Web Security An anonymous HTTP request can run code on a WordPress site. The bug...
n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer
Swati KhandelwalJul 16, 2026Vulnerability / Web Security n8n, the workflow automation platform, handed out the wrong accounts at login. On...
URGENT – Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat
Swati KhandelwalJul 10, 2026Enterprise Security / Security Incident Progress Software has told ShareFile customers to shut down the Windows servers...
RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service
Swati KhandelwalJul 07, 2026Malware / Mobile Security A new Android malware operation called RedWing is being rented out on Telegram...
New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions
Swati KhandelwalJul 06, 2026Cyber Espionage / Endpoint Security Researchers at Shandong University have shown a fast new way to pull data off...
Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices
Swati KhandelwalJul 02, 2026Cybercrime / Botnet Google has significantly degraded NetNut, one of the biggest networks that turns home devices...
Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters
Swati KhandelwalJul 01, 2026Kubernetes / Server Security Argo CD, a widely used tool for deploying software to Kubernetes, has an...
19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges
Swati KhandelwalJul 01, 2026Cybercrime / Ransomware A teenager accused of belonging to the hacking group Scattered Spider has been extradited...
Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
Swati KhandelwalJul 01, 2026AI Coding / Vulnerability Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking...
