Install
Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
Week in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploited
47+ min ago (1419+ words) Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Zero trust AI agents demand a different kind of security In this interview, Chris Webber, VP, Product Marketing at Teleport, explains why zero trust principles…...
Hackers Use Passkey-Themed Phishing to Hijack Microsoft 365 Accounts and Steal Cloud Data
2+ day, 19+ hour ago (707+ words) Hackers are using passkey-themed phishing to take control of Microsoft 365 accounts and collect cloud data. It can defeat MFA protections. The campaign starts with calls and texts to employees. Attackers pose as IT support, claim a passkey, MFA, or single…...
WordPress Uses AI to Stop Malicious Plugin Updates Before They Reach Millions of Websites
2+ day, 18+ hour ago (592+ words) WordPress has rolled out an automated, AI-driven security review that screens every plugin release before it reaches the WordPress.org update API, adding a critical checkpoint to a distribution pipeline that had previously lacked one. The move follows a real-world…...
NextGen Mirth Connect Flaws Expose Downstream System Logins
2+ day, 16+ hour ago (695+ words) Health records storage vendor NextGen Connect has a batch of high-severity flaws that could let attackers walk away with administrator passwords that open access to databases and downstream systems the logins connect to, an independent researcher found. See Also: What…...
Palo Alto PAN-OS Flaw Lets Unauthenticated Attackers Execute Code as Root
2+ day, 21+ hour ago (367+ words) Palo Alto Networks has disclosed a high-severity buffer overflow vulnerability in PAN-OS that could allow unauthenticated, network-based attackers to execute arbitrary code with root privileges on PA-Series hardware firewalls. Tracked as CVE-2026-0310, the flaw affects XML processing functionality in PAN-OS…...
S4GET CVE-2026-58240: Missing Authentication in SAP Message Server Enables Cluster-Wide RCE
2+ day, 19+ hour ago (1503+ words) 1. Basic Information Article Title: S4GET Advisory (CVE-2026-58240): SAP Message Server Flaw Publisher: Onapsis Publication Date: 2026-09-08 Original Source: Onapsis Related Sources: BleepingComputer: SAP warns of OVERPASS and S4GET Related Malware, Groups, CVEs, and Products: CVE-2026-58240, SAP NetWeaver Message Server, SAP Application Server, SAP…...
Passkey Phishing Hijacks Microsoft 365 Accounts for Cloud Data Theft
3+ day, 58+ min ago (417+ words) The activity, observed since May 2026, relies heavily on social engineering. Victims may receive a phone call, SMS message, or Microsoft Teams message from someone impersonating the organization’s IT helpdesk. The attacker claims that the user must urgently update a passkey,…...
Nightmare Eclipse Releases PoCs Targeting NVIDIA, CrowdStrike and Avast
3+ day, 7+ min ago (10+ words) konsulteer.com...
China-Linked Hackers Exploit Chrome and Windows Zero-Days in BlueMoon Attacks
3+ day, 2+ hour ago (229+ words) A rapidly adopted exploit kit, dubbed BlueMoon, chains Chrome and Microsoft Windows zero-days to compromise targets in espionage-focused phishing campaigns. Most observed activity has been linked to China-aligned clusters, although researchers cautioned that the toolkit cannot yet be attributed exclusively…...
Four Nation-State Actors Used the Same Chrome Zero-Day Exploit Kit Within 12 Days
3+ day, 3+ hour ago (418+ words) US Agencies Warn Chinese AI Firms Are Extracting Advanced AI Models Google fixes the seventh actively exploited Chrome zero-day of 2026 PoisonedRefresh: A Fileless Linux Rootkit That Injects PHP Web Shells Into F5 BIG-IP APM Server Memory Microsoft’s Biggest Patch Tuesday: 974 CVEs,…...