News
-
MovieReaper spreads through compromised torrent archive
Kaspersky says attackers compromised a shared torrent-file repository, causing multiple trackers to distribute a new multi-stage malware framework to users and organisations across several European countries.
-
Spain makes ENS controls machine-readable
Spain has published National Security Framework controls as structured JSON using NIST’s OSCAL specification, enabling greater automation across compliance, monitoring, audit, and risk-management workflows.
-
Nextcloud patches preview route to code execution
Nextcloud has patched a high-severity preview-processing flaw that can trigger a vulnerable ImageMagick component and create a route to arbitrary file writes and further server compromise.
-
BIND update fixes 14 DNS flaws
Internet Systems Consortium has disclosed 14 BIND vulnerabilities spanning resolver crashes, resource exhaustion, DNSSEC processing, cache integrity, and zone-transfer authentication.
-
Brevo breach spread malicious code downstream
A stolen Cloudflare credential allowed attackers to modify Brevo-hosted content at the CDN edge and push malicious code through JavaScript components embedded on customer websites.
-
Europe tests satellite links for cyber resilience
A CybExer-led European consortium will test protected satellite communications against interference, disruption, and cyberattack as Europe develops the secure connectivity capabilities associated with IRIS².
-
Oracle ships 673 enterprise security patches
Oracle’s September Critical Security Patch Update contains 673 new patches spanning databases, middleware, business applications, analytics, Java, and other enterprise technology.
-
Compromised plugin vendor backdoors WordPress sites
Attackers compromised the distribution infrastructure for Admin Menu Editor Pro and pushed backdoored updates to around 230 customers, affecting at least 1,500 WordPress sites.
-
WSO2 API flaw faces active exploitation
A critical WSO2 authentication-bypass vulnerability patched in May is now being actively targeted with forged administrator tokens against exposed API-management systems.
-
Acronis patches exploited backup plugin flaw
Acronis has patched a privilege-escalation vulnerability affecting cPanel and Plesk backup integrations after detecting limited exploitation against cPanel deployments.