Practical articles on AI, online safety, and security (39 articles)
Multiple critical vulnerabilities with CVSS 9.8 have been discovered in the Linux kernel related to NVMe/TCP, SMC sockets, and SCTP. These are remotely exploitable, making an immediate update to the latest kernel version mandatory.
An urgent backdoor, CVE-2026-18072, has been discovered in WordPress plugin 'Advanced Responsive Video Embedder (ARVE)' version 10.8.7. Please delete the affected plugin immediately.
A security settings checklist that Web service developers should integrate into their weekly routine. Review it now and maintain secure operations.
Arista VeloCloud Orchestrator (VCO) CVE-2026-16812 is a critical RCE vulnerability with a CVSS score of 10.0. Unauthenticated attacks have been observed, requiring immediate patch application and access restrictions.
An urgent vulnerability (CVE-2026-47304) affecting Microsoft .NET and Visual Studio has been discovered, allowing unauthenticated attackers to bypass security features. Immediate update to a patched version is mandatory.
An authentication bypass vulnerability (CVE-2026-66013) has been discovered in OpenRemote versions prior to 1.26.2. Unauthorized attackers could update console assets and hijack notifications, necessitating an immediate update to the patched version.
A security settings checklist for hardening IT systems. It explains permanent measures that should be implemented in daily operations.
An unauthenticated Remote Code Execution (RCE) vulnerability, CVE-2026-63030 and others, has been identified in WordPress. An immediate update to the patched version is required.
SharePoint Server vulnerable to authentication bypass via CVE-2026-56164. The immediate solution for this high-severity vulnerability, warned by CISA, is to update to the patched version.
A heap buffer overflow vulnerability, CVE-2026-42533, has been discovered in NGINX's `map` directive. This poses a risk of Denial of Service (DoS) and remote code execution, requiring an immediate update to the patched version.
An EoL Cisco 871 Integrated Services Router has a CSRF vulnerability (CVE-2008-4128) that is being actively exploited in Russian state-sponsored attacks. Immediate replacement with a newer device is required.
'GhostLock' (CVE-2026-53359), a vulnerability threatening the core of Linux systems, has been disclosed. Dormant for 15 years, demonstrated attacks show a 97% chance of root privilege acquisition, making immediate action essential.
The "GhostLock" vulnerability (CVE-2026-43499) in the Linux kernel is a severe issue that allows local unprivileged users to gain root privileges and escape containers. Prompt kernel updates are recommended.
A critical path traversal vulnerability, CVE-2026-48282, in Adobe ColdFusion is being actively exploited. With a CVSS score of 10.0, immediate patching for this vulnerability is imperative.
A new memory information leak vulnerability, CVE-2026-8451, has been discovered in the SAML authentication process of Citrix NetScaler ADC/Gateway. Exploitation has been confirmed within 24 hours of its disclosure, requiring urgent measures for administrators.
A severe authenticated RCE vulnerability, 'CVE-2026-45659,' has been discovered in Microsoft SharePoint Server and added to the CISA KEV catalog. It allows code execution even by low-privileged users, necessitating immediate patch application.
A severe remote code execution (RCE) vulnerability (CVE-2026-9860) has been discovered in the Cloudflare Images plugin for WordPress (versions 1.10.2 and earlier). This allows arbitrary code execution with authenticated author privileges, necessitating an immediate update.
A critical vulnerability allowing arbitrary code execution (RCE) has been discovered in Adobe ColdFusion's file upload functionality. Immediate action is required.
A Dirty Pipe-like vulnerability has been discovered in the Linux kernel's `act_pedit` module, and a Proof-of-Concept (PoC) has been released. This poses a risk of root privilege escalation on RHEL, Debian, Ubuntu, and other distributions, necessitating urgent countermeasures.
A severe account takeover vulnerability due to insufficient authentication has been discovered in WordPress's popular 'Ultimate Member' plugin, versions 2.11.4 and below. Immediate update is required.
A critical vulnerability has been discovered in the Deno runtime that allows bypassing the --deny-net rule, enabling access to internal networks. Immediate update to version 2.8.1 or later is required.
A supply chain attack has been launched against the Pro version of the popular WordPress plugin 'ShapedPlugin,' potentially leading to the theft of administrator credentials and 2FA secrets. Immediate action is required.
A vulnerability enabling unauthenticated remote code execution has been identified in Joomla Content Editor (JCE), prompting a CISA warning. There is a risk of PHP code execution, requiring immediate action.
A severe unauthenticated SQL injection vulnerability has been discovered in WordPress plugin 'eCommerce Product Catalog' versions 3.5.5 and below, allowing database manipulation without authentication. Immediate update is mandatory.
A critical vulnerability has been discovered in applications that process JavaScript embedded in PDF files. Maliciously crafted PDFs could lead to arbitrary code execution.
An authentication bypass vulnerability has been discovered in the PHP application of Nefteprodukttekhnika BUK TS-G. This could allow a remote, unauthenticated attacker to seize administrator privileges and manipulate the system.
A severe vulnerability (CVSS 9.8) allowing unauthenticated remote code execution has been discovered in Oracle PeopleSoft Enterprise PeopleTools, and numerous organizations have been compromised by zero-day attacks. Immediate patching and access restrictions are required.
An unauthenticated OS command injection vulnerability in Ivanti Sentry has been urgently disclosed. Rated with a CVSS score of 10.0, active exploitation has already been confirmed. Immediate patch application and access restrictions are mandatory.
A vulnerability in WordPress's popular backup plugin 'UpdraftPlus' is being actively exploited, potentially allowing unauthenticated attackers to gain administrator privileges and execute remote code.
An authentication bypass vulnerability with a CVSS score of 9.3 has been confirmed in Check Point's VPN products, with active exploitation by Qilin ransomware already observed. Immediate patching is required.
A critical out-of-bounds memory access vulnerability has been discovered in Google Chrome's V8 engine, and is already being actively exploited in attacks. Please update your Chrome browser to the latest version immediately.
A critical denial-of-service (DoS) vulnerability, CVE-2026-49975, has been disclosed in the mod_http module of Apache HTTP Server. Versions 2.4.17 through 2.4.67 are affected, and a prompt update is recommended.
A critical vulnerability, 'HTTP/2 Bomb,' discovered by OpenAI Codex, allows major web servers like Nginx, Apache, and IIS to be brought down by a single client with a low-bandwidth attack. Immediate action is required.
An urgent Remote Code Execution (RCE) vulnerability (CVE-2026-3300) has been identified in the WordPress 'Everest Forms Pro' plugin, and active attacks are underway. Additionally, a SQL Injection vulnerability (CVE-2025-14179) has been reported in PHP's PDO Firebird driver. Engineers are urged to promptly update their systems and implement countermeasures.
A PHP object injection vulnerability, enabling unauthenticated remote code execution, has been discovered in the Mirasvit Full Page Cache Warmer plugin for Magento 2, prompting CISA to issue an urgent alert.
A critical vulnerability (CVE-2026-8732) in the WordPress plugin 'WP Maps Pro' is being actively exploited, allowing attackers to create unauthenticated administrator accounts and gain full control of affected sites. Immediate update to version 6.1.1 or higher is required.
A highly critical vulnerability has been discovered in the popular WordPress plugin "WP Maps Pro," allowing unauthenticated attackers to create administrator accounts. This vulnerability is being actively exploited. Immediate updates are required.
An XPath injection vulnerability has been discovered in the APS catalog search function of Plesk for Linux. Low-privileged users can gain root privileges and execute arbitrary OS commands. An urgent update is recommended.
A severe authentication bypass vulnerability (CVE-2026-0257) has been disclosed in Palo Alto Networks PAN-OS GlobalProtect, and active exploitation has been confirmed. Urgent patch application and mitigation measures are essential.