Explore

Trendline Trendline
Hackers Exploit cPanel Vulnerability, Threatening Millions of Websites

Hackers Exploit cPanel Vulnerability, Threatening Millions of Websites

Hackers Exploit cPanel Vulnerability, Threatening Millions of Websites
Trendline Trendline
cPanel WHM Vulnerability Exposes Internet Infrastructure to Authentication Bypass

cPanel WHM Vulnerability Exposes Internet Infrastructure to Authentication Bypass

cPanel WHM Vulnerability Exposes Internet Infrastructure to Authentication Bypass
Rapid Read Rapid Read
OpenSSH Vulnerability CVE-2026-35414 Poses Significant Security Risk

OpenSSH Vulnerability CVE-2026-35414 Poses Significant Security Risk

A critical vulnerability has been identified in OpenSSH, affecting nearly all versions released over the past 15 years. This vulnerability, CVE-2026-35414, allows attackers to gain root access to affected servers, potentially leading to data theft, system tampering, and significant operational disruptions. The Centre for Cybersecurity Belgium has issued a warning, urging organizations to update to OpenSSH version 10.3 or later. The vulnerability involves an authentication bypass related to the authorized_keys principals option. Notably, attacks exploiting this vulnerability do not leave traces in logs, making detection challenging without advanced monitoring tools.
Rapid Read Rapid Read
Linux Kernel 'Copy Fail' Vulnerability Poses High Risk for System Takeover

Linux Kernel 'Copy Fail' Vulnerability Poses High Risk for System Takeover

A high-severity logic flaw in the Linux kernel, identified as CVE-2026-31431 and dubbed 'Copy Fail,' has been reported by cybersecurity firm Theori. This vulnerability allows unprivileged attackers to write code to other files' memory, potentially gaining root shell access. The flaw affects all Linux distributions since 2017 and is linked to the kernel's authencesn Authenticated Encryption with Associated Data (AEAD) template, used by IPsec for Extended Sequence Number (ESN) support. The issue arises from a 2017 optimization that placed page cache pages in a writable scatterlist, allowing attackers to modify the in-memory copy of any setuid-root binary readable by the user.
Rapid Read Rapid Read
Linux Kernel Vulnerability 'Copy Fail' Exposes Systems to Root Access Risk

Linux Kernel Vulnerability 'Copy Fail' Exposes Systems to Root Access Risk

A significant security vulnerability, named 'Copy Fail', has been discovered in the Linux kernel, affecting major distributions like Ubuntu, Amazon Linux, Red Hat Enterprise Linux, and SUSE since 2017. This flaw allows unprivileged local users to gain root access without the need for complex exploits. The vulnerability, identified as CVE-2026-31431, has a severity rating of 7.8 out of 10. It stems from a combination of kernel changes made between 2011 and 2017, which, when combined, allow a controlled 4-byte write into the kernel's memory. Theori, a security research firm, discovered the flaw and has released a Python script that can exploit it across various distributions. A fix has been committed to the mainline kernel, but organizations unable to patch immediately are advised to blacklist the algif_aead kernel module.
Rapid Read Rapid Read
Critical OpenSSH Vulnerability Requires Immediate Patching to Prevent Exploitation

Critical OpenSSH Vulnerability Requires Immediate Patching to Prevent Exploitation

A critical vulnerability has been discovered in OpenSSH, a widely used tool for remote server management. This vulnerability, identified as CVE-2026-35414, affects nearly all versions of OpenSSH released over the past 15 years. It allows attackers to gain root access to affected servers, enabling them to execute commands, steal data, and disrupt operations. The vulnerability arises from the mishandling of the authorized_keys principals option in specific scenarios involving a Certificate Authority. The Centre for Cybersecurity Belgium has issued a warning, urging organizations to update to OpenSSH version 10.3 or later to mitigate the risk.
Trendline Trendline
Incomplete Windows Patch Exposes Users to Zero-Click Attacks

Incomplete Windows Patch Exposes Users to Zero-Click Attacks

Incomplete Windows Patch Exposes Users to Zero-Click Attacks
Trendline Trendline
Pack2TheRoot Vulnerability in Linux Poses Security Risks

Pack2TheRoot Vulnerability in Linux Poses Security Risks

Pack2TheRoot Vulnerability in Linux Poses Security Risks
Rapid Read Rapid Read
OpenSSH Vulnerability Exposes Servers to Root Access for 15 Years

OpenSSH Vulnerability Exposes Servers to Root Access for 15 Years

A critical vulnerability in OpenSSH, identified as CVE-2026-35414, has been discovered, affecting versions released over the past 15 years. This flaw allows attackers to gain full root shell access to servers by exploiting a mishandling of the authorized_keys principals option. The issue arises when a comma in an SSH certificate principal name is misinterpreted, enabling users with a valid certificate from a trusted CA to authenticate as root. The vulnerability, which has a CVSS score of 8.1, was identified by the cybersecurity firm Cyera. The flaw does not register authentication failures in logs, making detection through log-based methods unreliable. The vulnerability was patched in OpenSSH version 10.3, released in early April 2026.
Trendline Trendline
OpenSSH Vulnerability Exposes Servers to Root Access for 15 Years

OpenSSH Vulnerability Exposes Servers to Root Access for 15 Years

OpenSSH Vulnerability Exposes Servers to Root Access for 15 Years
Rapid Read Rapid Read
Incomplete Windows Patch Leaves Systems Vulnerable to Zero-Click Attacks

Incomplete Windows Patch Leaves Systems Vulnerable to Zero-Click Attacks

Akamai has reported that an incomplete patch for a Windows vulnerability has led to a new security flaw, enabling zero-click attacks. The original vulnerability, CVE-2026-21510, was patched in February but left a gap that attackers could exploit without user interaction. This flaw allows attackers to steal credentials via auto-parsed LNK files. The Russian-linked group APT28 has been identified as exploiting this vulnerability, targeting entities in Ukraine and the European Union. Microsoft has since released a fix for the new vulnerability, CVE-2026-32202, as part of its April 2026 security updates.
Rapid Read Rapid Read
Firestarter Malware Persists Despite Cisco Firewall Patches

Firestarter Malware Persists Despite Cisco Firewall Patches

The Firestarter malware, associated with the ArcaneDoor threat actor, has been found to persist in Cisco's Firepower and Secure Firewall devices despite security patches released in September last year. This malware, identified as a Linux binary, embeds itself in the Firepower eXtensible Operating System (FXOS) base layer, surviving device reboots and evading detection. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the UK's National Cyber Security Centre (NCSC) have issued alerts, advising organizations to follow emergency directives, including physically disconnecting affected firewalls to disrupt the malware's persistence.