A DJI drone may keep hovering in the air while a nearby attacker, without any password, alters its connectivity settings, reboots the aircraft, or attempts to sever the pilot from control. The problem has...
A catastrophic vulnerability that lurked silently within the Linux kernel for nearly 14 years is now actively weaponized in real-world cyberattacks, alongside two other critical errors. The United States Cybersecurity and Infrastructure Security Agency...
A critical hole in an SD-WAN management hub has already crossed from advisory to real-world attack: Arista has confirmed exploitation of a VeloCloud Orchestrator vulnerability that, under a certain configuration, lets a remote attacker...
Four severe vulnerabilities deeply embedded within the Linux kernel, lurking undetected for 10 to 21 years, finally have functional public exploits. Consequently, these critical flaws allow attackers to achieve root privilege escalation. These vulnerabilities...
Apple has mounted the largest vulnerability purge in its entire history: a single September cycle brought more than 260 unique CVEs and sent nearly the whole of the company’s ecosystem scrambling to update. On...
This time, the theoretical threat of agentic hacking unequivocally escaped the confines of the laboratory. GreyNoise meticulously detailed a terrifying, real-world campaign launched against PaperCut NG/MF, where a solitary human operator commanded hundreds of...
Researchers have discovered a key embedded in the code of the Shinobi video surveillance system, through which an outsider could gain access to the user database and camera settings without a login or password....
Plex is once again urging owners of home media servers to act before any technical explanation appears. On September 1, the company demanded that users update Plex Media Server to version 1.43.3 or newer,...
Researchers at Calif developed the first zero-click worm for WeChat. This WeChat zero-click worm spreads through automated calls across iOS and Android platforms. Tencent has already mitigated this critical threat on their servers. Why...
TL;DR On September 6, 2026, N-able released an urgent security update fixing an actively exploited zero-day flaw. The critical N-central vulnerability allows remote unauthenticated attackers to execute arbitrary code with root privileges. Consequently, administrators...
Malicious actors have commenced active attacks against Citrix NetScaler infrastructure. They are exploiting the critical vulnerability designated as CVE-2026-19490. This severe flaw enables remote adversaries to circumvent authentication protocols entirely. Consequently, they gain illicit...
A critical Ruby on Rails vulnerability rapidly escalated from a theoretical threat into an active weapon. VulnCheck recently detected active exploitation of CVE-2026-66066. The cybersecurity community commonly refers to this severe flaw as KindaRails2Shell....
