Resources
Siemens Software Center Flaw Exploited in ROMULUS ClickFix Attacks
Siemens confirmed attackers exploited CVE-2026-110936 in Software Center, bundling a signed copy with malicious DLLs in the ROMULUS ClickFix campaign.
Laravel TokenGuard Flaw Lets Attackers Log In as Any User
Laravel disclosed a critical TokenGuard authentication bypass rated CVSS 9.2 that affects MySQL and MariaDB apps, plus a moderate data-loss flaw; patches exist.
Roundcube 1.6.20 and 1.7.5 Fix 20 Flaws, Including IMAP Injection
Roundcube released 1.6.20 and 1.7.5 to fix 20 flaws, including IMAP command injection, header injection, XSS, SSRF and CSRF; no exploitation is confirmed.
Plex2Shell Exploit Chain Hits Plex Servers a Day After PoC Release
Attackers began exploiting the Plex2Shell chain of four CVEs in Plex Media Server a day after a public proof-of-concept, dropping a cryptominer and proxy tool.
Drupal Patches Two Critical RCE Flaws, Warns Exploits Could Follow
Drupal patched critical RCE flaws CVE-2026-108097 in Field UI and CVE-2026-108099 in Entity List, warning exploits may be built within just hours or days.
Trojanized Rank Math SEO PRO 3.0.123 Backdoors WordPress Sites
Attackers tampered with Rank Math SEO PRO 3.0.123 packages, tracked as CVE-2026-111862, planting backdoors and stealing credentials from WordPress sites.
Apache Fixes 12 Kylin Flaws, Including Critical SQL Injection
Apache disclosed 12 Kylin flaws, led by critical SQL injection CVE-2026-64959, and separately fixed Airflow SSH and SFTP providers that skipped host-key checks.
CISA Flags dcm4chee Archive Flaws and Unpatched EseeCloud Cameras
CISA's October 15 advisories cover nine flaws: six in the dcm4chee medical image archive and three in EseeCloud IP cameras that have no vendor fix.
Infinity Core Research Publishes Exploits for Six Linux Kernel Flaws
Researcher Hyunwoo Kim released working exploits for six Linux kernel bugs called Infinity Core, five of which give local root or container escape.
China-Linked Armory Castle Exploited BeyondTrust Zero-Day
BeyondTrust patched CVE-2026-102764, a Remote Support zero-day that China-nexus group Armory Castle exploited since late August, per Mandiant and Google.
Weekly Newsletter
Weekly Cybersecurity Newsletter: 14th to 18th August
Explore our latest cybersecurity podcast episodes featuring ransomware attacks, phishing campaigns, corporate breaches, legal showdowns, and deep dives into evolving threats and digital defenses.
This Week In Cybersecurity: 23rd June to 27th June
News Stories New ‘FileFix’ Attack Exploits Windows File Explorer to Deliver Stealthy Commands Threat actors use the search-ms URI protocol ...
This Week In Cybersecurity: 26th to 30th May, 2025
"Cybersecurity threats escalate as ransomware attacks target major organizations, exposing sensitive data and highlighting vulnerabilities in systems across various industries. Stay informed."
This Week In Cybersecurity: 19th to 23rd May, 2025
This week, significant cybersecurity incidents include ransomware attacks, data breaches affecting major organizations, and ongoing threats from state-sponsored groups, highlighting vulnerabilities across various sectors.
This Week In Cybersecurity: 21st – 25th April, 2025
Targeted malware, ransomware, phishing, and ad fraud hit SK Telecom, Baltimore schools, Google, and more this week—exposing critical data and abusing trusted systems.
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.