2+ hour, 10+ min ago   (373+ words) A set of high-severity vulnerabilities in libssh2 could expose SSH and SFTP client applications to memory corruption, crashes, and potential code execution when connecting to a malicious server. libssh2 is a widely used C library that provides support for the SSH2 protocol in…...

2+ hour, 34+ min ago   (550+ words) Dysphoria has emerged as a fast-moving IoT botnet that has infected an estimated 200,000 devices worldwide. Its operators use a mix of Telnet and SSH password attacks alongside known software flaws to gain access. This familiar approach is still effective because…...

2+ hour, 20+ min ago   (490+ words) A newly disclosed exploit dubbed LegacyHive is raising alarms across the cybersecurity community after researchers confirmed it executes successfully on fully patched Windows systems running the July 2026 Patch Tuesday updates. Unlike conventional exploits that rely on memory corruption or unpatched…...

3+ hour, 8+ min ago   (240+ words) The company released a critical security bulletin on July 27, 2026. Progress stated that it has not received reports of active exploitation and is unaware of any direct operational impact on customers. Currently, no indicators of compromise are available. CVE-2026-59687 affects the…...

2+ hour, 41+ min ago   (462+ words) The company has confirmed that this vulnerability is actively being exploited in the wild, making immediate patching and reducing exposure essential for affected organizations. This vulnerability is classified as CWE-78, which refers to improper neutralization of special elements used in…...

3+ hour, 28+ min ago   (403+ words) Multiple high-severity vulnerabilities have been identified in FFmpeg, the widely used open-source multimedia framework. These flaws impact media parsing, decoding, filtering, and encoding components and can be triggered when an application processes malicious files. Several issues can lead to heap…...

3+ hour, 29+ min ago   (523+ words) A new Microsoft Teams vishing campaign is using fake IT support calls to gain remote access to corporate systems. The attackers then deploy GoGRPC, a Go-based backdoor that can run commands, collect system details, and maintain access to compromised devices....

6+ hour, 3+ min ago   (1134+ words) Active Directory is the beating heart of identity in most enterprises, and its single most valuable secret is the password hash of every user, service, and machine account. A DCSync attack lets an adversary walk out with those hashes without…...

17+ hour, 37+ min ago   (482+ words) A recent Microsoft Defender for Endpoint update briefly disabled antivirus protection on Linux servers following an upgrade and reboot, exposing affected machines to threats before Microsoft rolled out a fix. The issue struck Linux platform builds 101.26042.0000 through 101.26042.0009, where the Defender…...

19+ hour, 26+ min ago   (448+ words) GitHub has introduced a default three-day cooldown period for Dependabot version updates to reduce the risk of projects automatically adopting new malicious packages. This change targets a prevalent pattern in software supply chain attacks where attackers compromise a trusted package…...