Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

Introduction Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this...

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

Ravie LakshmananSep 15, 2026Vulnerability / Cloud Security Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite...

LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server

Swati KhandelwalSep 15, 2026Vulnerability / Web Security A critical vulnerability in LiteSpeed Web Server Enterprise could let a low-privilege website...

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Ravie LakshmananSep 15, 2026Vulnerability / Network Security Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco...

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Chrome...

3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials

Swati KhandelwalSep 14, 2026Network Security / Cyber Attack An attacker was operating inside the network of 3BB, one of Thailand's...

Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

A flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users exported to HTML files,...

New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing...

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries