Explore

Trendline Trendline
Hackers Exploit cPanel Vulnerability, Threatening Millions of Websites

Hackers Exploit cPanel Vulnerability, Threatening Millions of Websites

Hackers Exploit cPanel Vulnerability, Threatening Millions of Websites
Rapid Read Rapid Read
Critical Vulnerability in cPanel and WHM Exploited as Zero-Day Threatens Internet Security

Critical Vulnerability in cPanel and WHM Exploited as Zero-Day Threatens Internet Security

A critical vulnerability identified as CVE-2026-41940 has been discovered in cPanel and WebHost Manager (WHM), which are widely used Linux-based control panels for managing websites and servers. This flaw allows attackers to bypass authentication and gain root access to servers, posing a significant security risk. The vulnerability affects all supported versions of the software prior to the recent patch. It has been reported that this flaw may have been exploited as a zero-day for at least 30 days, raising concerns among security experts. The vulnerability involves a carriage return line feed (CRLF) flaw, allowing attackers to manipulate session cookies and gain unauthorized access. Emergency patches have been released, and users are urged to update their systems immediately to prevent potential exploitation.
Trendline Trendline
Critical cPanel and WHM Vulnerability Exploited as Zero-Day, Urgent Patches Released

Critical cPanel and WHM Vulnerability Exploited as Zero-Day, Urgent Patches Released

Critical cPanel and WHM Vulnerability Exploited as Zero-Day, Urgent Patches Released
Trendline Trendline
cPanel WHM Vulnerability Exposes Internet Infrastructure to Authentication Bypass

cPanel WHM Vulnerability Exposes Internet Infrastructure to Authentication Bypass

cPanel WHM Vulnerability Exposes Internet Infrastructure to Authentication Bypass
Trendline Trendline
cPanel Releases Patches for Critical Authentication Bypass Vulnerability

cPanel Releases Patches for Critical Authentication Bypass Vulnerability

cPanel Releases Patches for Critical Authentication Bypass Vulnerability
Trendline Trendline
Exposed VNC Servers Pose Significant Risks to Industrial Control Systems

Exposed VNC Servers Pose Significant Risks to Industrial Control Systems

Exposed VNC Servers Pose Significant Risks to Industrial Control Systems
Trendline Trendline
Checkmarx Confirms Data Theft in Supply Chain Attack Affecting Open Source Project

Checkmarx Confirms Data Theft in Supply Chain Attack Affecting Open Source Project

Checkmarx Confirms Data Theft in Supply Chain Attack Affecting Open Source Project
Rapid Read Rapid Read
Winona County Faces Data Breach After Ransomware Attack, Residents' Information at Risk

Winona County Faces Data Breach After Ransomware Attack, Residents' Information at Risk

Winona County in Minnesota has experienced a significant data breach following a ransomware attack earlier this month. Cybercriminals responsible for the attack have released information stolen from the county's network. The county announced the data release on Wednesday, emphasizing the seriousness of the situation. A comprehensive review is underway with the help of law enforcement and cybersecurity partners to determine the scope of the breach and identify affected individuals. The county has pledged to notify those whose private information is compromised as quickly as possible, in compliance with applicable laws. Resources will be provided to help protect the personal information of those affected. The attack, detected on April 7, led to parts of the county's network being taken offline, impacting systems such as vital statistics and the Department of Motor Vehicles. However, emergency services remained operational. This incident marks the second ransomware attack on the county this year, with a previ...
Rapid Read Rapid Read
LiteLLM Vulnerability Exploited Shortly After Disclosure, Exposing Sensitive Data

LiteLLM Vulnerability Exploited Shortly After Disclosure, Exposing Sensitive Data

A critical vulnerability in the LiteLLM AI gateway was exploited shortly after its disclosure, allowing attackers to access sensitive database tables. The flaw, identified as CVE-2026-42208, involves an SQL injection during the proxy API key verification process. This vulnerability enables unauthenticated attackers to send crafted Authorization headers to access the database, potentially leaking credentials. The first attacks were observed 36 hours after the advisory was indexed in the GitHub Advisory database. Attackers targeted tables containing API keys and provider credentials, although no further exploitation of the extracted data has been reported.
Trendline Trendline
GitHub Vulnerability Exposes Millions of Repositories to Potential Exploits

GitHub Vulnerability Exposes Millions of Repositories to Potential Exploits

GitHub Vulnerability Exposes Millions of Repositories to Potential Exploits
Trendline Trendline
Vimeo Confirms Data Breach Involving User and Customer Information

Vimeo Confirms Data Breach Involving User and Customer Information

Vimeo Confirms Data Breach Involving User and Customer Information
Trendline Trendline
Itron Discloses Cyber-Attack, Ensures Operations Remain Unaffected

Itron Discloses Cyber-Attack, Ensures Operations Remain Unaffected

Itron Discloses Cyber-Attack, Ensures Operations Remain Unaffected