Fragnesia CVE-2026-46300 Gives Linux Attackers Root Access
Fragnesia is a separate Linux kernel flaw in the Dirty Frag class. It can turn local access into root on unpatched systems, but the mitigation has real IPsec and AFS…
West Pharmaceutical Cyberattack Stole Data and Encrypted Systems
West Pharmaceutical disclosed a material cyberattack involving data exfiltration, encrypted systems, and global operational disruption. The important part is the overlap between breach response and manufacturing recovery.
YellowKey BitLocker Bypass PoC Targets TPM-Only Windows 11 Drives
A public YellowKey proof-of-concept claims a BitLocker bypass path on Windows 11 systems that rely on TPM-only unlock. Here is where the risk sits and what to check before a…
HackTool:Win32/Keygen
Microsoft Defender flags HackTool:Win32/Keygen when it finds a key generator or license-bypass tool. Learn what the alert means, when the risk is serious, and how to remove it safely.
Trojan:JS/ChatGPTStealer!MSR: What It Means and What to Do
Microsoft Defender can flag Trojan:JS/ChatGPTStealer!MSR when a malicious or suspicious JavaScript file targets browser sessions, AI-related pages, tokens, or credentials. Here is how to check the alert safely.
Microsoft Word Preview Pane RCE Bugs Put Outlook Users at Risk
Microsoft patched two critical Word RCE bugs where the Preview Pane is an attack vector, making Office updates urgent for Outlook and Microsoft 365 users.
Fortinet Fixes Critical RCE Flaws in FortiAuthenticator and FortiSandbox
Fortinet patched critical unauthenticated RCE flaws in FortiAuthenticator and FortiSandbox, making exposure review and fast version checks a priority for security appliance admins.
RubyGems May Attack: RubyDoc Abuse and API-Key Findings
September findings explain RubyDoc code execution, public-data retrieval and API-key attempts in the May RubyGems attack. Signups reopened May 16.
Exim CVE-2026-45185 Dead.Letter Can Lead to Mail Server RCE
Exim 4.99.3 fixes CVE-2026-45185 Dead.Letter, a GnuTLS/BDAT use-after-free that can expose internet-facing mail servers to potential remote code execution.
Mini Shai-Hulud Hits TanStack npm Packages With Signed Malware
Mini Shai-Hulud abused trusted publishing to ship malicious TanStack npm packages with valid provenance, turning package installs into a token-exposure incident for CI and developer machines.
TrickMo.C Android Banker Turns Phones Into Proxy Nodes
TrickMo.C moves Android banking malware control to TON/.adnl and adds proxy/pivot features, turning infected phones into traffic-exit nodes for fraud.
Checkmarx Jenkins Plugin Compromise Put CI Secrets at Risk
A rogue Checkmarx AST Scanner Jenkins plugin release put CI/CD source code and secrets at risk. Teams should verify plugin versions, mirrors, caches, and exposed credentials.
