A new open-source Linux toolkit called Furtex combines post-exploitation research, endpoint detection testing, eBPF inspection, and io_uring experiments in one project for authorized security assessments.…
Ransomware operators are exploiting CVE-2026-0257, an authentication bypass vulnerability in Palo Alto Networks PAN-OS, to enter corporate networks through GlobalProtect and deploy Qilin ransomware. Arctic…
A suspected cyberespionage actor has targeted government organizations in the Middle East with a multi-stage Windows malware chain that uses Telegram bots for command-and-control communication.…
Researchers have demonstrated how a malicious cloud tenant could manipulate legitimate AI workloads to create rapid power fluctuations inside a data center. The proposed Bit2Watt…
Gitea administrators should update their servers immediately to address CVE-2026-58443, a critical authorization vulnerability that can let a public-only access token write commits to a…
The Linux kernel team published roughly 440 CVE advisories within about 24 hours on July 19 and 20, 2026. The large batch covered bugs across…
A single managed detection and response alert led Rapid7 researchers to an exposed WebDAV server containing 1,048 malicious and testing files. The infrastructure operated as…
Microsoft Defender XDR detection rules can miss public network connections when they filter the DeviceNetworkEvents table only for RemoteIPType == "Public". Some IPv4 connections made…
Attackers exploited two zero-day vulnerabilities in SonicWall Secure Mobile Access 1000 appliances to obtain root access, install custom malware, capture network traffic, and attempt to…
Healthcare company Abbott is investigating unauthorized access to a limited number of internal systems within its Cancer Diagnostics business. The company says patient services, laboratory…
June 2, 2026
2 comments 
