CVE-2026-55553: urllib Redirects Can Leak Credentials
A high-severity Node.js urllib flaw can forward authentication headers on cross-origin redirects. Update to 4.9.1 or 2.44.1 and review possible exposure.
CVE-2026-21962 Exploited in Oracle HTTP Server Proxy
CISA confirms active exploitation of CVE-2026-21962 in Oracle HTTP Server and the WebLogic Proxy Plug-in. Check affected versions, patch, and preserve logs.
PavinLoader Spreads Through ClickFix and Fake Downloads
PavinLoader links fake CAPTCHA, software, and game lures to a multi-stage Windows malware chain. Learn the execution boundary, key clues, and account-recovery steps.
Grok Cryptographic Context Injection Could Leak Chat History
Adversa AI showed how encrypted webpage instructions could make Grok expose current-chat data. See who may be affected and what to do.
E4del and PINHOLE RATs Hide Commands in FTP Banners
E4del and PINHOLE use FTP server banners to deliver Windows malware. Check the execution boundary, persistence artifacts, and account recovery steps.
Petya vs NotPetya Recovery: MFT Repair and Safe Cleanup
Petya recovery depends on the exact variant. Learn when MFT work may help, why NotPetya is different, and how to preserve, rebuild, and scan safely.
Phobos Ransomware Recovery: Free Decryptor and Cleanup Guide
Phobos ransomware recovery starts with isolation and evidence preservation. Check the official Phobos/8Base decryptor, remove malware, and restore safely.
CVE-2026-73570 Exploited Against Zimbra Servers
CVE-2026-73570 is exploited against Zimbra servers with SNMP notifications enabled. Check exposure, update to 10.1.20, and hunt for compromise.
CareCloud Data Breach Affects 3.75 Million Patients
CareCloud breach affected 3.75 million patients. Learn what data may be exposed, how to verify the notice, freeze credit, and spot medical identity theft.
arrayref 0.3.10 Malware: Check Rust Builds and CI
Three poisoned Rust crates ran a malicious dependency during builds. Check lockfiles, Cargo caches, developer hosts, CI secrets, and generated artifacts.
CVE-2026-72529 and CVE-2026-72530 Exploited in TrueConf Server
CISA says two TrueConf Server flaws are actively exploited. Check fixed versions, TCP 4307 exposure, server artifacts, and unsigned client installers.
Manic Android Malware: Removal and Bank Account Recovery
Manic Android malware can steal banking and identity data and relay it through nearby infected phones. Learn how to isolate the device, remove a suspicious app, and recover accounts safely.
