D-Link Warns of High-Risk Vulnerabilities in DIR-822A Routers, Urges Customers to Take Immediate Action D-Link has issued a critical warning about two serious security flaws affecting its legacy DIR-822A dual-band Wi-Fi routers. The vulnerabilities, discovered by a security researcher who has published proof-of-concept exploit code, can be exploited remotely without any authentication or user interaction. … Read more
F5 has released urgent security updates to fix a critical zero-day vulnerability in its BIG-IP APM (Access Policy Manager) solution, which is being actively exploited in remote code execution attacks. The flaw, tracked as CVE-2026-94127, affects instances configured as an OAuth Authorization Server, allowing attackers to execute malicious code and potentially gain unauthorized access to … Read more
A Group of Hackers Claims to Have Breached the FBI’s Systems, Exposing Personal Data on Agents and Job Applicants A disturbing revelation has emerged in the cybersecurity world as ShinyHunters, a group known for its identity theft activities, claims to have breached the Federal Bureau of Investigation (FBI) systems. According to reports, the hackers claim … Read more
A Critical Flaw in Next.js ImageResponse Exposes Servers to Code Execution via Malicious SVG Input Cybersecurity researchers have discovered a critical vulnerability in the popular React-based web framework, Next.js. The flaw, found in the ImageResponse feature, can be exploited by attackers to execute server-side code and gain unauthorized access to sensitive data. The issue affects … Read more
Cybersecurity Agency Warns of Widespread Exploitation of Zyxel Flaw, Orders Federal Agencies to Patch The US Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on a high-severity vulnerability in Zyxel GS1900 series switches that is being actively exploited by attackers. CISA has added the flaw, tracked as CVE-2026-7273, to its Known Exploited Vulnerabilities … Read more
In a worrying development, cybersecurity researcher Abdelhamid Naceri has released yet another zero-day exploit targeting Microsoft’s Windows Defender antivirus software. The new exploit, dubbed “BigDiskBuster”, blocks Windows Defender updates on all supported Windows versions, leaving users vulnerable to malware attacks. Naceri, who claims to be a former Microsoft employee and has been involved in an … Read more
A Critical Vulnerability Exposed in Check Point Management Servers, Leaving Enterprises at Risk A recently discovered zero-day vulnerability in Check Point’s Security Management Server has been exploited in the wild, putting thousands of organizations at risk. The critical path traversal flaw allows unauthenticated attackers to upload arbitrary scripts and execute them with ease, making it … Read more
Shadow IT Threats Lurk in the Dark Corners of Your Network – How Wazuh Can Shine a Light on Unmanaged Assets Unbeknownst to many organizations, a significant portion of their network remains hidden from view. This “shadow IT” refers to hardware, software, and services operating outside the purview of IT and security teams, often without … Read more
A new breed of Windows malware has emerged, one that leverages artificial intelligence (AI) to make attack decisions without human intervention. ClosedQuorum, as it’s called, uses a panel of AI models to autonomously determine its next steps during post-compromise stages of an attack, effectively eliminating the need for human operators. The Go-based malware relies on … Read more
Tomorrow, a live webinar will delve into the intricacies of real-world Google Workspace breaches, shedding light on the tactics used by attackers to gain access to sensitive data. According to recent reports, these breaches often don’t rely on sophisticated exploits or stolen passwords, but rather on convincing users to grant unauthorized access through social engineering … Read more