PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the...

ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More

Ravie LakshmananOct 15, 2026Hacking News / Cybersecurity News Someone built a tool to steal data, then decided it should scare...

Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads

Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online...

Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks

Ravie LakshmananOct 15, 2026Cyber Espionage / Malware The threat actor known as Silent Lynx has been attributed to a fresh...

Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams

A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to...

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May...

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a...

Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules

Swati KhandelwalOct 15, 2026Vulnerability / Web Security Drupal core has a critical flaw in its Field UI module that could...

Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early