CVE-2026-20127 Zero-Day Auth Bypass Exploited
Exploitation of a maximum severity authentication bypass zero-day vulnerability affecting Cisco Catalyst SD-WAN Controller and Manager has been reported. Immediate patching is recommended to thwart…
Month: March 2026
Hackers Allegedly Selling Exploit for Windows Remote Desktop Services 0-Day Flaw
A threat actor identified as “Kamirmassabi” is allegedly selling a zero-day exploit for a Windows Remote Desktop Services privilege escalation vulnerability, tracked as CVE-2026-21533, for…
Cookie Chaos: How to bypass __Host and __Secure cookie prefixes
Browsers added cookie prefixes to protect your sessions and stop attackers from setting harmful cookies. In this post, you’ll see how to bypass cookie defenses…
149 Hacktivist DDoS Attacks Hit 110 Organizations in 16 Countries After Middle East Conflict
Cybersecurity researchers have warned of a surge in retaliatory hacktivist activity following the U.S.-Israel coordinated military campaign against Iran, codenamed Epic Fury and Roaring Lion.…
Books on Programming and Cybersecurity recommended by Zero Salarium Researchers
Books Recommended by Zero Salarium Programming is the backbone of the digital world. If you want to sharpen your cybersecurity skills, it’s the cornerstone you…
OAuth vulnerability in n8n automation platform could lead to system compromise
How serious is this? An important caveat: for any of this to be possible, an attacker would need access to the victim’s n8n system. From…
India disrupts access to popular developer platform Supabase with blocking order
Supabase, a popular developer database platform, has been blocked in India — one of its key markets — TechCrunch has learned. New Delhi ordered internet…
Password managers’ promise that they can’t see your vaults isn’t always true
Over the past 15 years, password managers have grown from a niche security tool used by the technology savvy into an indispensable security tool for…
Understanding IAM for Managed AWS MCP Servers
As AI agents become part of your development workflows on Amazon Web Services (AWS), you want them to work with your existing AWS Identity and…
Interplay between Iranian Targeting of IP Cameras and Physical Warfare in the Middle East
Key Findings During the ongoing conflict, we identified intensified targeting of IP cameras from two manufacturers starting on February 28, originating from infrastructure we attribute…
Manage your Elastic security stack as code with the Elastic Stack Terraform provider — Elastic Security Labs
The Elastic Stack Terraform provider has reached a significant milestone. Starting with release v0.13.1, you can manage your Elastic security posture – detection rules, exception…
Consequential OT Breaches Dropped in 2025 – What Happened?
OT Insights CenterConsequential OT Breaches Dropped in 2025 – What Happened? Consequential OT Breaches Dropped in 2025 – What Happened? In 2025, 57 cyber attacks…