WordPress on Wednesday announced patches for a high-severity vulnerability that allows authenticated attackers to execute arbitrary code remotely. Tracked as CVE-2026-65640 (CVSS score of 8.8),…
U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 13, 2026 U.S. Cybersecurity and Infrastructure…
The new program, meant to aggressively disrupt costly cybercrime schemes, carries numerous legal and security risks. Source link
A newly-signed presidential memorandum enlisting private sector companies in federal law enforcement hacking operations against criminal organizations could present a number of legal, practical and…
If the database runs with administrator permissions on Microsoft SQL Server, the account also has the ability to execute commands on the system, so the…
The Trump administration is recruiting private security firms to conduct federal government-authorized operations, including cyberattacks, against overseas-based criminal organizations that commit hacks on US persons,…
Today, we’re announcing that AWS Certificate Manager (ACM) will discontinue support for email-validated public certificates by September 30, 2027. If you use email validation for…
Authorities in Ukraine shut down 94 fraudulent call centers across the country that lured people into investment scams or tried to obtain access to bank…
Beacon, the customer relationship management (CRM) platform relied on by over a thousand UK charities and non-profit organizations, has confirmed that a threat actor made…
Modern Cloud Security programs are getting good at finding problems; they can detect exposed storage, vulnerable workloads, excessive permissions, misconfigured networks, risky sign-ins, and policy…
By Simon Phillips, CTO, CybaVerse Alert fatigue is an issue that has plagued Security Operations Centres for years. As organisations’ digital estates grow, there is…
Microsoft has released security updates that address six vulnerabilities in Exchange Server. These vulnerabilities include flaws that could allow remote code execution (RCE), privilege escalation,…
