ENDLESSDOORS Backdoor in Zbtlink Routers: 20 Models to Replace
ENDLESSDOORS is embedded in firmware for 20 tested Zbtlink and Wiflyer router models. Check the model, isolate the device, and plan replacement.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
October 24, 2026
Latest reports
Pass-ta-key Attack Lets Malware Hijack Google Passkeys
Unit 42 showed how malware on Chrome for Windows can abuse synced Google passkeys. Learn who is affected, what was fixed, and how to…
N-central CVE-2026-18577: Patch and Hunt for Cloudflared
N-central needs HF4 build 2026.3.1.14. Check appliance accounts and API logs, then investigate Take Control sessions and downstream persistence.
Arch Freezes AUR Pushes After Malware Wave: Check Your System
Arch temporarily stopped AUR pushes after malicious package takeovers. Check openconnect-sso exposure, Linux persistence, stolen secrets, and the right recovery order.
Rails CVE-2026-66066: Patch Active Storage and Rotate Secrets
Rails patched CVE-2026-66066 in Active Storage. Check whether your app uses vulnerable libvips processing, update, rotate exposed secrets, and inspect official forensic evidence.
Coldcard Seed Flaw: Update Firmware and Move Funds
Coldcard weak seed generation affects Mk3 and earlier Mk4, Mk5, and Q releases. Updating stops new weak seeds but does not repair an existing…
Adform Script Swapped Crypto Wallet Addresses on Websites
A compromised Adform tracking script could replace Bitcoin, Ethereum, and Tron recipient addresses while an affected page was open. Check transfers and clear browser…
Crypto.com Phishing Email: Fake Bank Alerts and Calls
Crypto.com warns of targeted phishing emails about unfamiliar activity and fake bank-account changes. Check the Anti-Phishing Code, verify safely, and recover by exposure stage.
XCSSET v40 Turns Xcode Projects Into a macOS Supply-Chain Trap
XCSSET v40 runs through trojanized Xcode projects and adds fileless persistence, browser theft, and defense evasion. Learn the build trigger, exposure boundary, and safe…