20 article(s) in our index mention this organisation.
Google released Chrome 154, addressing 108 vulnerabilities, including 11 critical bugs. The update focuses on fixing a range of issues like buffer overflows and use-after-free errors, and Google rewarded researchers for…
Arista Networks has issued a critical patch for a zero-day vulnerability in its VeloCloud Orchestrator (VCO) that’s currently being actively exploited. The flaw, CVE-2026-93952, allows remote attackers to access privileg…
A critical zero-day vulnerability (CVE-2026-94127) in F5 BIG-IP APM allows unauthenticated remote code execution when APM is configured as an OAuth authorization server. The vulnerability is being actively exploited, and…
A critical zero-day vulnerability in F5 BIG-IP Access Policy Manager (APM) has been actively exploited by threat actors. The flaw allows unauthenticated remote code execution, and F5 has released hotfixes to address the…
Despite concerns about the actual return on investment, CISOs are significantly increasing their cybersecurity budgets to incorporate AI, driven largely by fear of falling behind competitors and the accelerating pace of…
A vulnerability in F5 NGINX allows attackers to cause a denial of service and potentially compromise data integrity. This affects various NGINX products and versions, requiring immediate patching to mitigate the risk.
A Thai broadband provider, 3BB, was targeted by a threat actor who exploited vulnerabilities in Fortinet and F5 products to gain access to their systems. The attackers left behind a comprehensive arsenal of tools, includ…
This week’s security news is dominated by AI-related exploits and vulnerabilities, alongside traditional attack vectors. OpenAI agents were used to launch a massive RubyGems attack, while threat actors are increasingly i…
A sophisticated malware, linked to break-ins at F5 BIG-IP APM appliances, hides a PHP web shell in memory, bypassing traditional file-based scanning. The malware, tracked as c05d5254, is injected via a root-level install…
Multiple vulnerabilities have been discovered in F5 products, including potential for remote code execution, privilege escalation, and denial-of-service attacks. These vulnerabilities affect various F5 products, includin…
The US government has disrupted a Chinese hacking platform and botnet, QTFY, used by Chinese threat actors to target military and critical infrastructure systems in the United States. The disruption targeted QScan and QT…
A critical vulnerability (CVE-2026-42533) in NGINX allows unauthenticated remote code execution, potentially due to a heap buffer overflow triggered by a specific configuration involving regex-based maps. The vulnerabili…
F5 has released out-of-band security patches to address eight critical vulnerabilities affecting NGINX and BIG-IP. These flaws could lead to denial-of-service attacks, memory leaks, and potentially allow remote code exec…
Multiple vulnerabilities have been discovered in F5 products, including BIG-IP, WAF, and NGINX. These vulnerabilities could allow an attacker to achieve remote code execution, denial of service, and data confidentiality…
In June 2026, a significant number of cybersecurity M&A deals were announced, highlighting the industry's ongoing consolidation and investment in advanced security technologies. Several key acquisitions focused on areas…
A new cyberattack campaign, dubbed StrikeShark, is utilizing a previously undocumented malware family called SharkLoader to deploy Cobalt Strike Beacon. The campaign has targeted diplomatic organizations in Indonesia and…
A new malware family, named SharkLoader, has been identified as part of a broader campaign targeting organizations globally, including diplomatic entities, government organizations, and software development companies. Th…
F5 has released security patches to address two critical vulnerabilities (CVE-2026-42530 and CVE-2026-42055) in its NGINX Open Source and NGINX Plus products. These vulnerabilities, which allow for remote code execution,…
Chinese cyber espionage group Velvet Ant conducted a decade-long operation, gaining persistent access to a large organization’s isolated critical infrastructure network by hijacking its authentication flow. The attackers…
Microsoft has identified a cryptojacking campaign utilizing AI chatbots to recommend malicious download sites, a novel approach to social engineering. The campaign impersonates legitimate system utilities like CrystalDis…
