SonicWall warns of max severity SSRF flaw in SMA1000 gateways

A Critical Vulnerability Strikes Again: SonicWall Warns of SSRF Flaw in SMA1000 Gateways SonicWall has just released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in its SMA1000 series appliances. This vulnerability, tracked as CVE-2026-102255, could allow remote attackers without privileges to exploit the issue in low-complexity attacks and potentially gain unauthorized access … Read more

Hackers exploit critical Atlassian flaw after public PoC release

Critical Vulnerability in Atlassian Products Exploited by Hackers After Public Disclosure A critical flaw in multiple Atlassian product families has been exploited by hackers just hours after a detailed technical report was published. The vulnerability, identified as CVE-2026-21589, affects self-hosted instances of eight Atlassian products, including Jira, Confluence, and Bitbucket. What’s more alarming is that … Read more

FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins

The Ongoing FortiBleed Attacks: Locking Out VPN Administrators and Opening Up Ransomware Opportunities A concerning trend has emerged in the world of cybersecurity, with the FBI warning that FortiBleed attacks are still ongoing. These attacks target exposed Fortinet FortiGate firewalls and SSL VPN gateways, locking out legitimate administrators and creating an opening for ransomware groups … Read more

Ransomware recovery CEO charged over secret ransom payments

Ransomware Recovery Firm’s CEO Charged with Secretly Paying Ransom Demands A shocking indictment has been handed down against Zohar Pinhasi, the CEO of MonsterCloud, a company that claims to specialize in ransomware recovery. The charges allege that Pinhasi and his team were secretly paying ransom demands on behalf of their clients while misrepresenting their own … Read more

SonicWall warns of max severity SSRF flaw in SMA1000 gateways

A Critical Flaw in SonicWall Gateways Exposes Enterprise Networks to Remote Attacks A severe security vulnerability has been discovered in SonicWall’s SMA1000 series appliances, potentially putting thousands of enterprise networks at risk. The flaw, which allows remote attackers to exploit server-side request forgery (SSRF) weaknesses, has been patched by SonicWall with a hotfix release. The … Read more

Hackers hijack Google domains after breaching ccTLD registries

A sophisticated hacking operation has compromised several country-code top-level domains (ccTLDs), allowing attackers to hijack Google’s domains in Ghana, American Samoa, and Sierra Leone. The breach not only affected Google but also other organizations within these ccTLDs, highlighting a critical vulnerability in the way domain name system (DNS) records are managed. The attack began with … Read more

FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins

The ongoing FortiBleed attacks have left thousands of Fortinet FortiGate firewalls and SSL VPN gateways vulnerable to hackers, who are using compromised credentials to lock out legitimate administrators. The Federal Bureau of Investigation (FBI) has issued a warning about the attacks, which have been linked to ransomware operations and have affected over 86,644 devices across … Read more

Ransomware recovery CEO charged over secret ransom payments

A Ransomware Recovery CEO’s Dirty Secret: Charging Victims Twice, Paying Attackers In a stunning case of alleged deceit, Zohar Pinhasi, 50, owner of Florida-based ransomware remediation company MonsterCloud, has been charged with conspiracy to commit wire fraud and two counts of wire fraud. Prosecutors claim that instead of using proprietary technology to recover encrypted data, … Read more