Earlier in Cybersecurity
Cybersecurity researchers have detailed a sophisticated WordPress backdoor, codenamed SC, that utilizes multiple persistence mechanisms to ensure its survival and self-regeneration after attempted cleanups. This advanced malware, identified by "SC_" markers within injected content, has been described by Sucuri…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) officially added a critical authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities (KEV) catalog on Wednesday. This addition follows credible reports indicating that the vulnerability is currently…
Security researchers have released the first public proof-of-concept (PoC) for CVE-2026-86950, a critical vulnerability affecting Apple's CoreGraphics framework. Apple has previously stated that this flaw may have been exploited in attacks targeting specific individuals.
Cryptocurrency exchange Bitget confirmed on Wednesday that attackers exploited a zero-day vulnerability in third-party security products to steal $387.5 million last week. This confirmation comes from ongoing investigation findings provided by SlowMist, a blockchain security firm.
MetaMask, a widely used software cryptocurrency wallet, announced on Thursday that it is actively addressing an "ongoing security incident" that has impacted a segment of its infrastructure. The company stated in a communication that it is working internally to remediate…
Threat actors are actively exploiting a critical pre-authentication command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway, enabling them to deploy web shells and exfiltrate sensitive configuration data. The LevelBlue Threat Hunt Operations & Research (THOR) team observed…