Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A three-CVE chain lets any default LiteLLM user escalate to admin and get a shell on the gateway server. A separate RCE is already in CISA's KEV. Here's what t…
Ransomware isn't slowing down. If anything, it's getting sharper, more selective, coordinated, and much harder to clean up after. From healthcare systems to su…
The blockchain firm Harmony has recently suffered a devastating cyberattack. As confirmed, Harmony lost crypto…Blockchain Firm Harmony Lost $100 Million In Cyb…
Learn how an open source program office (OSPO) - a bureau of open source experts within your organization dedicated to overseeing how your company uses, create…
Kubernetes adoption is up - and so is the number of security incidents in container and Kubernetes environments. One of the ways that organizations can tackle …
Blockchain tech is helping the world in more ways than we can think of, and…5 Cases of Blockchain for Cybersecurity on Latest Hacking News
A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a…
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on …
AFP reports: Major French supermarket chains Intermarche and Cooperative U were hit by a cyberattack that caused their refrigerators to defrost, the two retail…
Ukraine’s largest grocery store chain, ATB, confirmed that it was hit by a cyberattack after hackers posted an extortion demand on its website.
On September 10, 2026, Wiz Research reported that multiple attackers had chained two Artifactory vulnerabilities against self-hosted repositories. One flaw gav…
Rebuild with newer golang toolchain
Rebuild with newer golang toolchain
Cybersecurity researchers have flagged a new multi-stage malware delivery attack chain that uses social engineering and Blogger pages to deliver an information…
A reverse shell makes the target machine initiate the connection back to the attacker, bypassing firewalls that only filter inbound traffic. This guide walks t…
A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidia…
The North Korea-aligned state-sponsored hacking group known as ScarCruft has compromised a video game platform in a supply chain espionage attack, trojanizing …
Checkmarx has disclosed that its ongoing investigation tied to the supply chain security incident has revealed that a cybercriminal group published data relate…
The threat activity cluster known as SloppyLemming has been attributed to a fresh set of attacks targeting government entities and critical infrastructure oper…
Cybersecurity researchers have disclosed what they say is an active "Shai-Hulud-like" supply chain worm campaign that has leveraged a cluster of at least 19 ma…
SINGAPORE, Singapore, 17th February 2026, CyberNewswireCredShields Leads OWASP Smart Contract Top 10 2026 as Governance and Access Failures Drive Onchain Risk …
Threat actors tied to North Korea have been observed targeting the Web3 and blockchain sectors as part of twin campaigns tracked as GhostCall and GhostHire.Acc…
A European embassy located in the Indian capital of New Delhi, as well as multiple organizations in Sri Lanka, Pakistan, and Bangladesh, have emerged as the ta…
PAM sits at the center of Linux authentication. Every login, SSH session, and privilege escalation request runs through it. It checks credentials, enforces pol…
