$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws
A two-week focused sandbox bug-bounty program resulted in 1,285 filings, but none that could access customer data. The Vercel sandbox, a Firecracker‑based microVM environment, is…
Latest Cybersecurity News — Page 74
View all →
Shared Hosting at Risk: LiteSpeed Enterprise Bug Can Grant Root from a Single Tenant
Shared Hosting at Risk: LiteSpeed Enterprise Bug Can Grant Root from a Single Tenant Pierluigi Paganini September 15, 2026 Critical LiteSpeed Enterprise flaw lets one…
AI is now leading driver of new cybersecurity spending
AI investments are expected to help automate security operations and enhance identity and access management. Source link
Cisco warns customers of actively exploited zero-day in email gateways
Attackers of unknown origins and motivations are exploiting a critical zero-day vulnerability in Cisco Secure Email Gateway, authorities and researchers said Monday. The vulnerability —…
Scott Bessent confirms weekend meeting with He Lifeng days before Xi’s US visit
US Treasury Secretary Scott Bessent on Tuesday confirmed that he will meet Chinese Vice Premier He Lifeng this weekend for the final preparatory talks between…
Exposed Vite servers are being probed for AWS and Azure credentials
Vite was part of a broader scanning pattern F5 also observed attackers combining CVE-2026-39364 with older Vite file access vulnerabilities, including CVE-2025-30208, CVE-2025-31125 and CVE-2024-45811.…
Leaks, data breaches, and ransom notes: The worst hacks of 2026 so far
If anything, 2026 has made clear that cybersecurity is no longer a background concern. Today, security is at the front and center of many conversations,…
Dispel targets exposed PLCs and remote access risks facing small U.S. water and electric utilities
Dispel announced on Monday opening of the Dispel Community Power & Water Program at the American Public Power Association’s Cybersecurity & Technology Summit in San…
DOE selects Frenos, Raptor Dynamix, and Bastazo for SENTRY energy cybersecurity funding
The U.S. Department of Energy’s (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) announced on Monday Securing ENergy Technology ResiliencY (SENTRY) award recipients—Frenos,…
Give every teammate and agent the right level of access to your Workers
As more teams — and now agents — build applications on Cloudflare’s Developer Platform, having the right access controls is crucial to allow you to…
Doubling Down: Detecting In-Memory Threats with Kernel ETW Call Stacks
Introduction We were pleased to see that the kernel call stack capability we released in 8.8 was met with extremely positive community feedback – both…
BambooToken malware controls Windows and Linux systems via MQTT
A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with…