SecurityNewLXD, MicroCloud flaw lets clients be impersonated
Canonical patched a maximum-severity LXD and MicroCloud bug that let attackers assume a trusted client's identity without its private key.
> Search
30 results for “bug”
SecurityNew
Cyber CrimeNewPolymarket breach exposes supply-chain risk
A hijacked third-party script let attackers drain 726 Polymarket wallets, prompting about $3.9 million in refunds and a review of script trust.
Cyber CrimeUnpatched AhsayCBS Bugs Exploited as Zero-Days
Attackers are chaining two unpatched AhsayCBS vulnerabilities to gain remote code execution and deploy webshells, with at least five organizations targeted.
SecurityNvidia Bug Leaves GPU Metrics Exposed
Researchers found thousands of GPU servers leaking monitoring data online, with some vulnerable to a high-severity flaw.
SecurityNew SonicWall Flaw Hits VPN Gateways
SonicWall issued hotfixes for a maximum-severity SSRF bug in SMA1000 appliances, urging customers to upgrade before attackers take note.
SecurityGoogle Pauses OSS Bug Bounty Submissions
Google has temporarily stopped accepting product vulnerability reports for its OSS VRP, citing a surge in automated, mostly invalid submissions.
SecurityFortra BoKS Patches Fix Critical Auth Bypass
Fortra fixed eight bugs in BoKS, including a 9.9-severity auth bypass and a 9.1 command injection, but reported no known exploitation.
Cyber CrimeDIVD breach linked to agentic AI attack
Dutch bug-hunting nonprofit says AI agents exploited Zammad zero-days, stealing researcher emails in seconds.
Cyber CrimeNetScaler Flaw Weaponized for Deep Access
LevelBlue says attackers exploited a critical NetScaler bug to plant web shells, create superuser accounts, and exfiltrate configuration data.
Cyber CrimeZimbra Bug Exploited for Mailbox Theft
Microsoft says attackers chained a patched Zimbra command-injection flaw into web shells, credential theft and cloud exfiltration.
SecurityTeen's Auth Flaw Opened Titan's Data Vault
A 16-year-old researcher bypassed Microsoft's Titan analytics by exploiting an unverified JWT and was paid a $5,000 bounty.
SecurityGoogle: AI Is Rewriting Bug Economics
GTIG data shows vulnerability disclosures doubled in 2026 while exploitation shifted toward n-days, with AI-discovered flaws carrying a riskier profile.
SecurityWatchGuard Patches 15 Fireware OS Flaws
WatchGuard fixed a critical Fireware OS code injection flaw and 13 high-severity bugs, plus three Access Point vulnerabilities disclosed a day earlier.
Tech NewsSeptember Windows updates break Always On VPN
Microsoft says a protocol fallback bug leaves enterprise VPN connections stuck in a connecting state; a temporary workaround exists.
SecurityChrome 154 Fixes 108 Flaws, 11 Critical
Google's latest stable release patches a wide swath of memory-safety bugs, but most bug bounty payouts remain undecided.
SecurityCheck Point Zero-Day Hit Management Servers
Attackers exploited a management server flaw in July while a separate VPN bug now draws ongoing attempts against small-business firewalls.
Cyber CrimeFake Twilio npm Probe Hid Credential Theft
Researchers say a package posing as an authorized Twilio bug-bounty probe went through 11 versions before trying to exfiltrate API credentials.
SecurityAI-Crafted Exploit Chain Hit OpenAI Code
Researchers chained an ImageMagick flaw with an OpenAI sign-in issue to reach internal code, earning a bounty.
SecurityFour Kernel Flaws, Public Exploits, One Fix
A researcher published working local-root exploits for four Linux kernel bugs fixed weeks earlier, flagging a patching race for older systems.
SecurityOne Week, Nine Flaws, No Easy Fix
SecurityWeek's roundup covers a ransomware sentencing, a zero-click AI plugin flaw, and a critical SAP bug under active scrutiny.
Cyber Crimenpm stealer tied to bounty hunter
CrowdStrike says a claimed bug bounty hunter likely built the PhantomRaven npm stealer with an LLM, active since November 2022.
SecurityMythos May Ease 2027 Patching Load
Gartner's Craig Lawson suggests AI bug-hunting could cut vulnerability severity next year as technical debt gets paid down.
SecurityLiteSpeed Enterprise Flaw Risks Root on Shared Hosts
cPanel warns a LiteSpeed Web Server Enterprise bug could let one hosting account gain root on shared servers, with no CVE assigned.
Tech NewsMicrosoft confirms Excel paste bug after update
Microsoft has acknowledged that the September 2026 KB5002914 security update can silently break copy and paste in Excel, leaving users without error messages.
SecurityGitLab's Perfect 10 Flaw Exposes Secrets
A maximum-severity path traversal bug in GitLab's repository commits API lets unauthenticated attackers read arbitrary files, and probes are already underway.
SecurityTelegram export flaw left old files exposed
A patched Telegram Desktop bug hid JavaScript in exported HTML, letting old export files leak or rewrite their contents when opened.
SecurityObscurity Fades as AI Exposes Old Flaws
AI agents are unearthing decades-old bugs and widening the patch gap, leaving secret-dependent defenses exposed.
SecurityGitLab's Patch Race Against Active Exploits
GitLab patches a maximum-severity path traversal flaw and a critical EE deserialization bug as researchers report in-the-wild probing within hours.
Tech NewsARM Windows apps fixed after patch
Microsoft resolved a launch bug hitting Teams and Outlook on ARM-based Windows 11 devices with September's Patch Tuesday update.
Tech NewsWindows Wallpaper Bug Finally Fixed
Microsoft says the September 2026 Patch Tuesday update resolves a bug that reset desktop backgrounds and mouse settings on Windows 11.