Cyber CrimeNewStorm-1175 Debuts New Ransomware
Microsoft says China-linked Storm-1175 shifts from Medusa to the new StormEncryptor ransomware, likely via N-central flaw CVE-2026-18577.
> Search
30 results for “2026”
Cyber CrimeNew
Cyber CrimeNewFormer Medusa Affiliate Debuts New Ransomware
Microsoft tracks Storm-1175's shift to StormEncryptor, following exploitation of an N-central flaw.
SecurityFlaw in Progress LoadMaster exploited in attacks
CISA warns of active exploitation of critical command injection flaw in Progress Kemp LoadMaster; urges patching.
Tech NewsCensus 2026: What Australians Need to Know
Australia's 2026 Census is compulsory, with new questions and a AU$364 daily fine for non-compliance.
SecurityCritical Command Injection Hits MSI RadiX Router
A critical command injection vulnerability in the MSI RadiX AXE6600 router allows remote attackers to execute arbitrary code and gain root access.
SecurityCritical Command Injection Hits MSI Radix
A critical vulnerability in the MSI Radix AXE6600 router allows remote attackers to gain root access via the wps.cgi interface.
SecurityCritical Buffer Overflow Hits D-Link Routers
A critical buffer overflow vulnerability in the D-Link DWR-M961 allows remote attackers to execute arbitrary code or crash the device.
SecurityCritical Dell VSI Flaw Allows Session Hijack
Dell has issued an urgent update for its Virtual Storage Integrator to fix a critical vulnerability that allows unauthenticated attackers to hijack sessions.
SecurityCritical WordPress AI Copilot Flaw Found
A critical authorization bypass in the AI Copilot plugin allows unauthenticated attackers to create administrator accounts and seize full control of websites.
SecurityDell OMSA Authentication Flaw Risks Access
A critical authentication vulnerability in Dell OpenManage Server Administrator allows unauthenticated remote attackers to gain unauthorized access.
SecurityCritical Azure SQL Managed Instance Flaw
A high-severity vulnerability in Azure SQL Managed Instance allows unauthorized network-based privilege escalation, requiring immediate attention.
SecurityCritical CodeIgniter File Upload Flaw Found
A critical vulnerability in CodeIgniter 4 allows attackers to bypass file validation, potentially leading to remote code execution on affected servers.
SecurityCISA Warns of Exploited Progress LoadMaster Flaw
A critical command injection vulnerability in Progress LoadMaster is under active exploitation, prompting urgent CISA remediation requirements.
Cyber CrimeH1 2026 Attack Chains Bypass Trust
Recent investigations reveal how attackers leverage legitimate accounts and blockchain data to execute sophisticated financial fraud.
SecurityPaperclip Flaw Opens AI Agent Gateways
A critical authorization bypass in the Paperclip platform allowed attackers to execute arbitrary code with server-level permissions.
Cyber CrimeRansomware Activity Rebounds in July
New data indicates a sharp rise in ransomware incidents throughout July 2026, breaking a multi-month period of lower activity.
SecurityTrueBooker WordPress Plugin Critical Flaw
A critical authorization bypass vulnerability in the TrueBooker plugin allows unauthenticated attackers to reset passwords for any user, including administrators.
SecurityCritical SharePoint SSRF Flaw Disclosed
A critical server-side request forgery vulnerability in Microsoft Office SharePoint allows unauthorized network spoofing and carries a CVSS score of 9.6.
SecurityCritical Azure SRE Agent Flaw Found
A critical authorization vulnerability in the Azure SRE Agent allows attackers to escalate privileges over a network, warranting immediate attention.
SecurityCritical Microsoft Power Apps Flaw Discovered
A critical authorization vulnerability in Microsoft Power Apps allows remote attackers to elevate privileges, necessitating immediate attention from administrators.
SecurityCritical Azure Active Directory Flaw Found
A high-severity vulnerability in Azure Active Directory allows authorized attackers to perform privilege escalation across the network.
SecurityCritical Microsoft Entra SyncFabric Flaw
A critical privilege escalation vulnerability in the Microsoft Entra Provisioning Service allows authorized attackers to gain elevated network access.
SecurityCritical Azure SQL Database Flaw Found
A critical authentication bypass in Azure SQL Database allows unauthorized attackers to gain elevated privileges over a network.
SecurityCritical Access Control Flaw in Azure Logic Apps
A critical vulnerability in Azure Logic Apps allows unauthorized information disclosure, earning a CVSS score of 9.6.
SecurityIBM Langflow Under Active RCE Attack
A critical flaw in IBM's Langflow platform is currently being exploited, prompting an urgent warning from federal security officials.
SecurityIBM Langflow OSS Cryptographic Flaw Exposed
A high-severity cryptographic key derivation vulnerability in IBM Langflow OSS could allow unauthorized access to sensitive data.
SecurityIBM Langflow OSS Encryption Flaw Exposed
A cryptographic weakness in IBM Langflow OSS allows attackers to reproduce encryption keys, potentially exposing stored API keys and authentication tokens.
SecurityCISA Warns of Active JetBrains TeamCity Flaw
A deserialization vulnerability in JetBrains TeamCity is under active exploitation, forcing federal agencies to patch systems by August 8, 2026.
SecurityCritical SQL Injection Found in Loca CMS
A critical SQL injection vulnerability in Loca Software CMS allows unauthorized attackers to gain full control over affected database systems.
Cyber CrimePhysical Attacks Targeting Crypto Wealth
New data reveals a surge in violent physical thefts targeting cryptocurrency holders, with millions lost in the first half of 2026.