Dozens of Red Hat packages backdoored through its official NPM channel
The worm, dubbed Shai-Hulud, has all the hallmarks of malware released last month as freely available open source. TeamPCP was the first group to use…
Month: June 2026
Google Threat Intelligence in Elastic Security — Elastic Security Labs
Elastic Security natively ingests Google Threat Intelligence: known-malicious IPs, domains, URLs, and file hashes matched against your telemetry the moment they appear, each carrying a…
Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks
A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and FakeUpdates techniques on compromised sites. Thousands of websites have…
Critical Vulnerability Magento Cache Plugin Enables Remote Code Execution Attacks
A critical security vulnerability has been discovered in a widely used Magento caching plugin that allows attackers to remotely execute malicious code with no login,…
Critical Magento Cache Plugin Vulnerability Enables Remote Code Execution Attacks
A critical security vulnerability in a widely used Magento extension is exposing thousands of online stores to remote code execution (RCE) attacks. The vulnerability, tracked…
Why Encrypted File Sharing Is Essential for Modern Businesses
Consider the history of any recent corporate scandal, and it is quite possible to guess what the story began with: a poorly secured file. No…
Windows Netlogon RCE exploited, domain controllers at risk (CVE-2026-41089)
CVE-2026-41089, a critical Windows Netlogon RCE flaw that allows remote code execution, is now actively exploited in the wild, the Centre for Cybersecurity Belgium (CCB)…
China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan
A new cyber espionage campaign codenamed Operation Dragon Weave has been observed targeting officials and citizens in the Czech Republic and Taiwan to deliver an…
Sapphire 2026: SAP executives admit route change on high road to business AI
SAP changed direction on its “journey” to becoming a wholescale business artificial intelligence (AI) provider “around eight or nine months ago”, according to its CEO…
Cbus Super Fund’s Group head of technology departs
Industry fund Cbus Super’s group head of technology Patrick Vartuli has left after a little longer two years in the role. Image credit: Patrick Vartuli/LinkedIn.…
WP Maps Pro Vulnerability Exploited to Take Over WordPress Sites
Threat actors are exploiting a critical-severity vulnerability in the WP Maps Pro WordPress plugin to take over websites, Defiant warns. WP Maps Pro allows site…
A SpaceX Security Engineer Used AI to Find a 19-Year-Old Linux Bug That Gives Attackers Root
CIFSwitch, a Linux Root Bug Hidden in Plain Sight for 19 Years Pierluigi Paganini June 01, 2026 CIFSwitch is a 19-year-old Linux logic bug turning…