Explore

Trendline Trendline
Palo Alto Networks Patches High-Severity Vulnerabilities to Prevent Exploitation

Palo Alto Networks Patches High-Severity Vulnerabilities to Prevent Exploitation

Palo Alto Networks Patches High-Severity Vulnerabilities to Prevent Exploitation
Trendline Trendline
Palo Alto Networks and SonicWall Address High-Severity Vulnerabilities with New Patches

Palo Alto Networks and SonicWall Address High-Severity Vulnerabilities with New Patches

Palo Alto Networks and SonicWall Address High-Severity Vulnerabilities with New Patches
Trendline Trendline
Apache ActiveMQ Classic Vulnerability Exposed After 13 Years, Posing Security Risks

Apache ActiveMQ Classic Vulnerability Exposed After 13 Years, Posing Security Risks

Apache ActiveMQ Classic Vulnerability Exposed After 13 Years, Posing Security Risks
Trendline Trendline
Rapid7 Report Highlights Accelerating Exploitation of Software Vulnerabilities

Rapid7 Report Highlights Accelerating Exploitation of Software Vulnerabilities

Rapid7 Report Highlights Accelerating Exploitation of Software Vulnerabilities
Rapid Read Rapid Read
Cybersecurity Firm Defiant Warns of Critical Ninja Forms Vulnerability Affecting WordPress Sites

Cybersecurity Firm Defiant Warns of Critical Ninja Forms Vulnerability Affecting WordPress Sites

A critical vulnerability has been identified in the File Uploads addon for the Ninja Forms WordPress plugin, which could allow threat actors to take over vulnerable websites. The cybersecurity firm Defiant has reported that this addon is used by approximately 50,000 websites, and there have been thousands of attempts to exploit the vulnerability. The flaw, tracked as CVE-2026-0740, is an unauthenticated arbitrary file upload issue due to missing file type validation. This vulnerability allows attackers to upload malicious PHP code to a website's server, potentially leading to remote code execution. The issue was discovered and reported via the Wordfence bug bounty program, with a security researcher receiving a reward for identifying the flaw. Users are advised to upgrade to the latest version of the addon to mitigate the risk.
Rapid Read Rapid Read
Iranian Hackers Leak Private Data of Former IDF Chief, Raising Security Concerns

Iranian Hackers Leak Private Data of Former IDF Chief, Raising Security Concerns

Iranian hackers, identified as part of the group Handala, have released private photos, videos, and personal documents of former IDF Chief of Staff Herzl Halevi. This breach is part of a series of 'hack-and-leak' operations targeting Israeli security officials. The leaked materials include over 19,000 confidential images and videos, some from top-secret meetings and classified files. The hackers also disclosed personal documents such as passports and photos from Halevi's visits to military facilities and meetings with U.S. and Arab counterparts. The group claims to have archived the identities of Israeli military personnel, including pilots and commanders. This incident follows previous leaks involving other Israeli officials, suggesting a pattern of cyber operations by Iranian intelligence.
Trendline Trendline
Maxis Berhad Wins Award for Innovative Fake BTS Detection Dashboard

Maxis Berhad Wins Award for Innovative Fake BTS Detection Dashboard

Maxis Berhad Wins Award for Innovative Fake BTS Detection Dashboard
Trendline Trendline
Webinar Highlights Limitations of Automated Penetration Testing Tools

Webinar Highlights Limitations of Automated Penetration Testing Tools

Webinar Highlights Limitations of Automated Penetration Testing Tools
Rapid Read Rapid Read
US Authorities Disrupt Russian Espionage Operation Using Hacked Routers

US Authorities Disrupt Russian Espionage Operation Using Hacked Routers

The US Justice Department and the FBI have announced the disruption of a Russian espionage operation involving hacked SOHO routers. The operation was linked to the threat actor known as APT28, Forest Blizzard, and Fancy Bear, believed to be backed by Russia's GRU. The hackers targeted vulnerable TP-Link and MikroTik routers, altering their DHCP and DNS settings to redirect traffic through their infrastructure. This adversary-in-the-middle attack allowed the capture of encrypted traffic, including passwords and emails. The attack exploited a known vulnerability, CVE-2023-50224, to control TP-Link routers. Microsoft identified over 200 organizations and 5,000 consumer devices affected by the attack, which began in August 2025.
Trendline Trendline
Meta Faces Investigation Over Former Engineer's Unauthorized Access to Private Facebook Photos

Meta Faces Investigation Over Former Engineer's Unauthorized Access to Private Facebook Photos

Meta Faces Investigation Over Former Engineer's Unauthorized Access to Private Facebook Photos
Trendline Trendline
AI Security Firms Warn of Predictable Passwords Generated by LLMs, Urging Codebase Audits

AI Security Firms Warn of Predictable Passwords Generated by LLMs, Urging Codebase Audits

AI Security Firms Warn of Predictable Passwords Generated by LLMs, Urging Codebase Audits
Rapid Read Rapid Read
Apache ActiveMQ Classic Vulnerability Exposed for 13 Years, Poses Security Risks

Apache ActiveMQ Classic Vulnerability Exposed for 13 Years, Poses Security Risks

A remote code execution (RCE) vulnerability has been discovered in Apache ActiveMQ Classic, a widely used open-source messaging and integration patterns server, which has been present for 13 years. The vulnerability, tracked as CVE-2026-34197, allows attackers to invoke management operations through the Jolokia API, potentially retrieving remote configuration files and executing OS commands. This security defect can be exploited by chaining it with an older flaw, CVE-2022-41678, which allows attackers to write webshells to disk. The issue has been addressed in ActiveMQ Classic versions 5.19.4 and 6.2.3, and users are advised to update their deployments promptly.