Information Security News Blog

Diagram showing the Avo admin panel flaw CVE-2026-55518 bypass mechanism 0

Critical Avo Admin Panel Flaw Exposes Applications

At a glance CVE: CVE-2026-55518 CVSS Score: 9.6 (Critical) Product: Avo Admin Panel Framework Affected Versions: <= 3.32.0 Impact: Privilege escalation, cross-tenant data exposure Exploitation Status: Public PoC exists Fixed-in Version: 3.32.1, 4.0.0.beta.51 Recommended...

Crypto clipper utilizing Tor network illustration 0

Microsoft Discovers Crypto Clipper Utilizing Tor for Control

Malicious software architectures are increasingly eschewing conspicuous command-and-control infrastructures. Instead, they seamlessly conceal communications with their operators deep within anonymous networks. Recently, Microsoft meticulously chronicled a sophisticated campaign targeting cryptocurrency holders that exemplifies this...

Hackers hijacking Roblox games using fake job offers and malware 0

Hackers Hijacking Roblox Games Through Fake Job Offers

Malicious actors are no longer exclusively targeting rare virtual items within the Roblox ecosystem. They have escalated their operations to expropriate entire developmental projects. Creators have invested years nurturing these digital environments, which often...

FreeBSD logo with hardware circuits illustrating OS architecture 0

FreeBSD 15.1-RELEASE Launches with Network and Kernel Upgrades

The FreeBSD Project has officially announced the release of FreeBSD 15.1-RELEASE. While the operating system’s external interface remains comfortably familiar, the underlying architecture has undergone substantial modernization. This pivotal release introduces profound enhancements to...

GrapheneOS secure firmware running on Android 17 0

GrapheneOS Achieves Early Port to Android 17

GrapheneOS is rapidly aligning with the latest iteration of the Android operating system. The dedicated project team has proactively prepared to migrate their highly secure firmware to Android 17 almost immediately following the new...

Apple updating Hide My Email addresses to a new dedicated domain 0

Apple Modifies Hide My Email Feature to Use Dedicated Domain

Apple intends to substantively diminish the efficacy of one of its most advantageous privacy mechanisms designed for premium iCloud subscribers. The technology giant will systematically transition masked email aliases to a distinct, dedicated domain....