CVE-2026-53362 Exploited for Linux Container Escape
CVE-2026-53362 is now in CISA KEV after active exploitation. Learn which Linux container hosts are exposed, how to patch, and what evidence to review.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
September 13, 2026
Latest reports
CVE-2026-55553: urllib Redirects Can Leak Credentials
A high-severity Node.js urllib flaw can forward authentication headers on cross-origin redirects. Update to 4.9.1 or 2.44.1 and review possible exposure.
CVE-2026-21962 Exploited in Oracle HTTP Server Proxy
CISA confirms active exploitation of CVE-2026-21962 in Oracle HTTP Server and the WebLogic Proxy Plug-in. Check affected versions, patch, and preserve logs.
PavinLoader Spreads Through ClickFix and Fake Downloads
PavinLoader links fake CAPTCHA, software, and game lures to a multi-stage Windows malware chain. Learn the execution boundary, key clues, and account-recovery steps.
Grok Cryptographic Context Injection Could Leak Chat History
Adversa AI showed how encrypted webpage instructions could make Grok expose current-chat data. See who may be affected and what to do.
E4del and PINHOLE RATs Hide Commands in FTP Banners
E4del and PINHOLE use FTP server banners to deliver Windows malware. Check the execution boundary, persistence artifacts, and account recovery steps.
CVE-2026-73570 Exploited Against Zimbra Servers
CVE-2026-73570 is exploited against Zimbra servers with SNMP notifications enabled. Check exposure, update to 10.1.20, and hunt for compromise.
CareCloud Data Breach Affects 3.75 Million Patients
CareCloud breach affected 3.75 million patients. Learn what data may be exposed, how to verify the notice, freeze credit, and spot medical identity theft.
arrayref 0.3.10 Malware: Check Rust Builds and CI
Three poisoned Rust crates ran a malicious dependency during builds. Check lockfiles, Cargo caches, developer hosts, CI secrets, and generated artifacts.