A critical vulnerability has been discovered in several Linux UEFI shims signed with Microsoft’s digital certificate, potentially allowing attackers to bypass Secure Boot and gain unauthorized access to systems. The flaw, which affects 11 outdated shim packages, was found by security researchers at CyberNews.work. The affected shim packages were created between 2012 and 2017, a … Read more
RabbitMQ Flaws Expose OAuth Secrets and Tenant Data, Putting Millions at Risk Security researchers have discovered a set of critical vulnerabilities in RabbitMQ, an open-source messaging broker widely used by enterprises for inter-service communication. The flaws, disclosed on July 13th, could allow attackers to steal sensitive OAuth secrets and expose metadata from cross-tenant queues, putting … Read more
A Critical OAuth Flaw Exposes Microsoft Entra Users to Credential Validation Attacks Microsoft Entra users are facing a heightened risk of credential validation attacks due to a newly discovered vulnerability in the OAuth client ID system. Attackers can exploit this weakness to validate stolen credentials, potentially gaining unauthorized access to sensitive data and systems. The … Read more
As AI-powered security tools continue to revolutionize the way we approach vulnerability detection, Pentera’s latest innovation is taking the industry by storm. By transforming AI-driven workflows into validation engines, Pentera has created a game-changing solution for organizations seeking to secure their software against vulnerabilities discovered by AI models. Pentera’s technology works by leveraging the same … Read more
A new study has uncovered disturbing vulnerabilities in popular cryptocurrency wallet extensions, putting users’ sensitive information at risk of exposure and exploitation. Researchers analyzed 85 crypto wallet browser extensions, discovering that many leak users’ addresses and engage in cross-site tracking, potentially compromising the security of millions of people worldwide. The study, conducted by a team … Read more
A critical vulnerability affecting Linux systems has been discovered, allowing attackers to bypass Secure Boot protections and potentially gain control over computers. The issue lies in 11 outdated Microsoft-signed UEFI shims that can be exploited by malicious actors. These vulnerable components are no longer supported by Microsoft but remain installed on some Linux distributions. The … Read more
A Critical Flaw in RabbitMQ Exposes OAuth Secrets and Tenant Data, Leaving Thousands of Users at Risk RabbitMQ, a popular open-source message broker used by thousands of organizations worldwide, has been found vulnerable to several critical security flaws. The issues, discovered by researchers from the firm Trail of Bits, allow attackers to leak sensitive information, … Read more
SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, and Commerce Cloud Enterprise software giant SAP has released a slew of security patches to address critical vulnerabilities in its NetWeaver Application Server ABAP, Approuter, and Commerce Cloud. The patches, part of SAP’s July 2026 security patch day, fix a total of 20 new and updated security notes … Read more
The US Treasury Department’s Office of Foreign Assets Control (OFAC) has taken a major step in combating ransomware attacks, sanctioning two individuals and one entity for their role in enabling these devastating cybercrimes. The sanctions target First VPN Service (1VPNS), a virtual private network provider that sold services to ransomware groups, as well as its … Read more
In a move that could finally bring some much-needed relief to frustrated Windows Search users, Microsoft has begun testing a cleaner and faster version of its search function. Gone are the days of ads and promotional content cluttering up your search results – at least for those participating in the experimental trial. The changes are … Read more