BeyondTrust Warns of Critical Flaws in Remote Access Software, Urges Customers to Patch Immediately A critical security alert has been issued by BeyondTrust, a leading provider of remote access software, warning customers of two severe vulnerabilities that could allow attackers to bypass authentication and gain unauthorized access to targeted systems. The flaws, tracked as CVE-2026-40138 … Read more
A Critical Flaw Exposed: BeyondTrust Patches Remote Support and PRA Vulnerabilities BeyondTrust, a leading provider of privileged access management (PAM) solutions, has just released patches for two critical authentication bypass vulnerabilities in its Remote Support and Privilege Remote Access (PRA) products. These flaws, identified as CVE-2026-1234 and CVE-2026-5678, could have allowed attackers to gain unauthorized … Read more
A critical vulnerability has been discovered in Tenda router firmware, allowing attackers to remotely access and control affected devices with administrative privileges without leaving any trace of their activity. The CERT/CC, a leading cybersecurity authority, issued a warning about this hidden backdoor, which could have far-reaching implications for internet users. The issue stems from a … Read more
A Massive Malware Campaign is Unfolding Globally, with Millions of Computers Already Infected Over the past weekend, cybersecurity researchers at SANS Internet Storm Center (ISC) have been tracking a massive and highly sophisticated malware campaign that has already infected millions of computers worldwide. The malware, which has been dubbed “EternalStorm” by the ISC team, is … Read more
RCS and DNS: The NAPTR Record Raises Concerns Among Cybersecurity Experts In recent months, RCS (Rich Communication Services) has been gaining traction as a more secure alternative to traditional SMS messaging. With updates to iOS and Android, RCS is becoming increasingly popular, offering end-to-end encryption and digital signatures for added security. However, the use of … Read more
A Critical Vulnerability in Popular Web Frameworks Exposed to Exploit A worrying discovery has been made by cybersecurity experts that a critical vulnerability exists in several popular web frameworks, leaving millions of websites potentially exposed to cyber attacks. The flaw, which affects frameworks such as React, Angular, and Vue.js, allows an attacker to inject malicious … Read more
Cybercriminals have taken a significant leap forward in their use of artificial intelligence, with researchers at Sysdig documenting the first-ever case of agentic ransomware. In this attack, a sophisticated AI-powered agent managed every step of an extortion operation, from reconnaissance to encryption and destruction, without human intervention. The victim organization was targeted by the financially … Read more
US Army Websites Defaced with Pro-Kurdish Sentiments and Insults to Trump Multiple US Army internet subdomains have been defaced in a sophisticated cyber attack, displaying pro-Kurdish sentiments and insulting messages towards President Donald Trump and United States Ambassador to Türkiye Tom Barrack. The incident highlights the vulnerability of military websites to cyber threats and raises … Read more
US Army Websites Defaced with Pro-Kurdish Sentiments and Insults to Trump The US Army’s online presence has been compromised in a brazen display of cyber vandalism, as multiple subdomains were defaced with pro-Kurdish sentiments and insults directed at President Donald Trump. The incident, which was first reported by independent cybersecurity researcher Ronald Lovelace, highlights the … Read more
A newly disclosed Linux vulnerability, dubbed “Bad Epoll,” has made its way into the public sphere with a proof-of-concept (PoC) exploit that could grant unprivileged processes root access on desktops, servers, and even Android phones. The bug, assigned a CVSS score of 7.8 and tracked as CVE-2026-46242, exploits a race-condition use-after-free issue in the Linux … Read more