Virtualizor BGP Hijack: Check the Server After the Update
A valid certificate accompanied a malicious Virtualizor update. Check the vendor indicator,…
RedC2 npm Packages: Importing Can Infect a Linux Host
RedC2 starts a Linux backdoor when a poisoned npm package is imported.…
CVE-2026-53362 Exploited for Linux Container Escape
CVE-2026-53362 is now in CISA KEV after active exploitation. Learn which Linux…
Gunra Ransomware Targets Windows and Linux, CISA Warns
A joint CISA/FBI advisory details Gunra ransomware, Windows .ENCRT and Linux .GNRA…
Arch Freezes AUR Pushes After Malware Wave: Check Your System
Arch temporarily stopped AUR pushes after malicious package takeovers. Check openconnect-sso exposure,…
AWS Kiro Flaw Turned Hidden Web Text Into Code Execution
AWS patched a Kiro IDE flaw that let hidden web text rewrite…
NGINX CVE-2026-42533: Check Regex Maps and Update Now
CVE-2026-42533 affects NGINX map directives with regex captures. Check the exposure pattern…
LiteSpeed cPanel Plugin CVE-2026-48172 Exploited for Root Scripts
LiteSpeed says CVE-2026-48172 is being actively exploited in its user-end cPanel plugin.…
NGINX CVE-2026-42945 Exposes Rewrite Rules to Crash and RCE Risk
CVE-2026-42945 affects NGINX rewrite rules that combine unnamed PCRE captures with question-mark…
Fragnesia CVE-2026-46300 Gives Linux Attackers Root Access
Fragnesia is a separate Linux kernel flaw in the Dirty Frag class.…
Exim CVE-2026-45185 Dead.Letter Can Lead to Mail Server RCE
Exim 4.99.3 fixes CVE-2026-45185 Dead.Letter, a GnuTLS/BDAT use-after-free that can expose internet-facing…
cPanel CVE-2026-41940 Exploited to Drop Filemanager Backdoor
Attackers are exploiting cPanel & WHM CVE-2026-41940 to deploy a Filemanager backdoor,…