Earlier in Cybersecurity
A critical security vulnerability within cPanel's CalDAV and CardDAV service, disclosed on September 22, enabled any user with a cPanel hosting account to execute code with root privileges, thereby achieving complete control over the server.
XRanges launched its AI security agent scoring system, XRanges for AI, on January 17, 2024, to provide objective performance metrics for autonomous cybersecurity agents. This new system aims to address a significant challenge in the cybersecurity industry: the lack…
A critical use-after-free vulnerability within the Linux kernel's AF_UNIX socket subsystem has been exploited, enabling attackers to escape containerized environments and achieve root-level privileges on the host system. Security firm DepthFirst disclosed this finding in research published on September 22…
F5 Networks has released engineering hotfixes to address a critical zero-day vulnerability in its BIG-IP Access Policy Manager (APM) product. The flaw, identified as CVE-2026-94127, allows attackers to achieve unauthenticated remote code execution (RCE) on affected BIG-IP systems.
A Chinese threat actor, identified as UTA0565, has been observed exploiting a newly disclosed exploit chain involving Google Chrome and Microsoft Windows as zero-days. These attacks, detected between September 3 and September 4, 2026, utilized a sophisticated method of chaining…
A critical security vulnerability has been discovered within the Next.js framework, a popular open-source React framework developed by Vercel. This flaw specifically affects the `ImageResponse` feature, a powerful tool designed to dynamically generate Open Graph images and other social media…
The cyber extortion group ShinyHunters announced on Tuesday, March 19, 2024, that it had successfully breached the U.S. Federal Bureau of Investigation (FBI). In a statement disseminated on the dark web, the group asserted that it had obtained highly sensitive…