1. Attackers are chaining three Ivanti Connect Secure flaws to gain unauthenticated root access, and CISA has added two of them to its Known Exploited Vulnerabilities catalog following active exploitation (thehackernews.com). 2. A malicious ChatGPT share link could run attacker code in a logged-in session and read private chats; OpenAI fixed the flaw eight days after it was reported and rated it P1 (thehackernews.com). 3.…
Posts tagged as “DDoS”
1. Cisco issued a warning regarding an actively exploited zero day vulnerability in Identity Services Engine tracked as CVE 2026 76460 with a CVSS score of 10.0. (The Hacker News) 2. A critical vulnerability in Check Point Security Management and Log Servers allows unauthenticated attackers to execute code as root. (The Hacker News) 3. Docker warned of a critical vulnerability CVE 2026 77179 that allows…
1. Threat actors are actively exploiting a critical directory traversal vulnerability in VMware vCenter tracked as CVE-2026-59310 to gain persistent remote access (thehackernews.com). 2. CISA confirmed that ransomware groups are actively abusing a high severity remote code execution vulnerability in Microsoft SharePoint tracked as CVE-2026-55040 (bleepingcomputer.com). 3. Cisco reported that CVE-2026-20349, a high severity flaw in ASA and FTD software, is being exploited in the…
1. Three Microsoft Defender zero day vulnerabilities codenamed BlueHammer RedSun and UnDefend are being actively exploited in the wild to gain elevated privileges (The Hacker News). 2. The Payouts King ransomware group is utilizing QEMU virtual machines as a reverse SSH backdoor to evade detection by endpoint security solutions (BleepingComputer). 3. The Grinex cryptocurrency exchange has suspended operations following a 13.7 million dollar hack that…