A Critical Docker Flaw Left Unpatched for Weeks, Exposing Users to Potentially Catastrophic Consequences In a concerning display of vulnerability exploitation, threat actors have begun probing a critical flaw in Gitea, an open-source Git repository manager that runs on top of the Docker platform. The weakness, identified as CVE-2026-20896, was publicly disclosed just 13 days … Read more
A Critical Linux KVM Flaw Puts Millions of Servers at Risk A 16-year-old vulnerability in the Kernel-based Virtual Machine (KVM) software, which is widely used on Linux systems, has been discovered to allow guest virtual machines to escape and compromise their host environments on Intel and AMD x86-based servers. The flaw, designated as CVE-2022-2385, has … Read more
Iranian hackers have unleashed a new cyber attack tool, dubbed Cavern, targeting Israeli organizations with unprecedented precision and stealth. This sophisticated Command and Control (C2) framework allows its operators to execute complex attacks, exploiting previously unknown vulnerabilities in software applications. The Cavern C2 framework has been linked to Iranian state-sponsored hacking groups, which have been … Read more
Armored Likho APT Targets Government and Electric Power Entities with Sophisticated Malware A recent investigation has uncovered a highly skilled advanced persistent threat (APT) actor, dubbed Armored Likho, which has been targeting government and electric power organizations in multiple countries. According to Kaspersky, the group’s operations span Russia, Brazil, and Kazakhstan, and its arsenal includes … Read more
Businesses are finally getting smart about cybersecurity risks. Gone are the days of simplistic risk assessment scores that fail to account for real-world consequences. Today’s organizations need a more nuanced approach that links security threats to their financial and operational realities. At its core, this shift towards business-aligned risk management is all about connecting the … Read more
A Critical Adobe ColdFusion Flaw is Being Exploited by Attackers, Urgent Action Required A maximum-severity vulnerability in Adobe’s ColdFusion platform has been actively exploited by attackers just hours after being publicly disclosed. The flaw, tracked as CVE-2026-48282, affects multiple versions of the platform and allows malicious actors to gain remote code execution on unpatched systems … Read more
Software Creation Speeds Up, But Security Lags Behind A revolution is underway in software development. Generative artificial intelligence and Vibe Coding are making it possible for developers to create applications at an unprecedented pace – almost as fast as they think them up. However, this accelerated creation process has left a gaping hole in security: … Read more
Threat actors are already probing a critical flaw in Gitea, an open-source platform for managing Git repositories, just 13 days after its disclosure. The vulnerability, identified as CVE-2026-20896, affects Docker containers and allows attackers to escalate privileges on compromised systems. Gitea is used by thousands of organizations worldwide to host and manage their software development … Read more
A critical vulnerability in Adobe ColdFusion, a popular web application development platform, is being actively exploited by attackers just two days after Adobe released patches to address the issue. The vulnerability, tracked as CVE-2026-48282, affects multiple versions of ColdFusion and allows hackers to gain remote code execution on unpatched systems without requiring any user interaction. … Read more
As Software Creation Approaches the Speed of Thought, Security Lags Behind The latest innovation in software development has revolutionized the way applications are created. Generative artificial intelligence (AI) and Vibe Coding have made it possible for anyone, anywhere to build functional solutions at an unprecedented pace. However, this rapid progress has raised a pressing concern: … Read more