An unpatched zero-day vulnerability in the Gogs self-hosted Git service can allow attackers to gain remote code execution (RCE) on Internet-facing instances. [...]
Delivered via phishing lures, the malware combines financial theft with data exfiltration and remote access. The post New BTMOB Android Malware Enables Full Device Takeover appeared first on SecurityWeek .
ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ATEN Unizon. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the RpcProvider class. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-29041.
Hardcoded machineKey values in a configuration file enabled ViewState deserialization attacks leading to remote code execution. The post Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment appeared first on SecurityWeek .
The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.
Security Fix(es):
* dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291)
* dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890)
* dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891)
* dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892)
* dnsmasq: Broken ECS source validation bypass (CVE-2026-4893)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Insufficient validation and authentication in the Secure Workload’s REST APIs provide remote attackers with Site Admin privileges. The post Cisco Patches Critical Vulnerability in Secure Workload appeared first on SecurityWeek .
CVE-2026-9082 can be exploited without authentication for information disclosure, privilege escalation, and remote code execution. The post Drupal Patches Highly Critical Vulnerability Exposing Websites to Hacking appeared first on SecurityWeek .
The 2026 Verizon Data Breach Investigations Report (DBIR) reveals that vulnerability exploitation has become the leading initial access vector for breaches, responsible for 31% of incidents. Meanwhile, organizations are patching vulnerabilities more slowly, with median time-to-patch increasing by 34% to 43 days. The volume of vulnerabilities continues to grow rapidly, driven in part by AI-powered tools that accelerate vulnerability discovery. This creates a widening gap between vulnerability disclosure and remediation, exacerbating the risk of exploitation. The report highlights the critical need for comprehensive exposure management that prioritizes risks based on context rather than attempting to patch all vulnerabilities indiscriminately. It also notes that credential abuse and misconfigurations compound the exposure problem. The findings underscore a systemic challenge in traditional patch-based defense models, especially as AI accelerates both vulnerability discovery and exploitation.
The security defect can be exploited remotely, without authentication, to execute arbitrary code and leak sensitive information. The post Unpatched ChromaDB Vulnerability Can Lead to Server Takeover appeared first on SecurityWeek .
The flaw leads to denial-of-service on default configurations and to remote code execution if ASLR is disabled. The post Exploitation of Critical NGINX Vulnerability Begins appeared first on SecurityWeek .
This analysis addresses the evolving security challenges faced by data centers in the era of agentic AI, where AI systems autonomously execute business decisions. Data centers have become critical national infrastructure, integrating legacy operational technology (OT) and extended IoT (xIoT) devices that were not originally designed with modern security in mind. The threat landscape includes AI-powered attacks targeting both digital assets and physical infrastructure, such as cooling and power systems, potentially causing operational denial and costly downtime. Attackers may exploit vulnerabilities in third-party vendor portals or engineering workstations to pivot into process control layers, disrupting physical systems. The complexity of securing data centers is heightened by the need to maintain near-perfect uptime while managing rapid patch cycles and protecting identity-based network communications. Regulatory frameworks increasingly require continuous, real-time monitoring and proactive exposure management across IT, OT, identity, and AI domains. A comprehensive security strategy involves asset discovery, attack path anticipation, risk prioritization, identity perimeter protection, third-party risk monitoring, and compliance streamlining.
The persistent, evasive implant provides remote access, surveillance, and credential exfiltration capabilities. The post Sophisticated Quasar Linux RAT Targets Software Developers appeared first on SecurityWeek .
Dubbed Bleeding Llama, the heap out-of-bounds read issue can be exploited remotely, without authentication. The post Critical Bug Could Expose 300,000 Ollama Deployments to Information Theft appeared first on SecurityWeek .
CVE-2026-0073 affects Android’s System component and it can be exploited without any user interaction. The post Critical Remote Code Execution Vulnerability Patched in Android appeared first on SecurityWeek .