MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead...

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Ravie LakshmananSep 23, 2026Malware / Cloud Security Unknown threat actors have managed to compromise two legitimate MemTensor packages across the...

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

Swati KhandelwalSep 23, 2026Vulnerability / Web Security A flaw in cPanel's CalDAV and CardDAV service lets anyone with a cPanel hosting account...

545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent

Autonomous security agents are getting good at finding bugs. Nobody has a good way to measure how good. Point one...

Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests

Anthropic and OpenAI on Tuesday announced new models, with both artificial intelligence (AI) companies noting that they are continuing to...

Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape

Swati KhandelwalSep 23, 2026Vulnerability / Linux A use-after-free in the Linux kernel's AF_UNIX socket subsystem can be used to escape...

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

Swati KhandelwalSep 23, 2026Vulnerability / Network Security Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager (APM)...

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

Ravie LakshmananSep 23, 2026Zero-Day / Vulnerability A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google...

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input