SConnect Flaw Lets Malicious Websites Reach a Native Host
Thales SConnect flaw CVE-2026-18397 lets malicious sites bypass signature checks and execute code via native host. Update now, SWIFT urges Web Connect.
CyberWorldOps
Latest news
More news
Page 20 / 91 · 822 articles
Warlock Uses On-Premises SharePoint to Deploy Ransomware on at Least 33 Hosts
China-linked Warlock ransomware exploited on-premises SharePoint flaws to breach utilities and governments, deploying ransomware on 33+ hosts via SYSVOL.
GitLab Fixes AI Gateway Sandbox Escape Enabling Command Execution
GitLab fixed a critical AI Gateway sandbox escape that could let authenticated users execute commands. Self-hosted gateways should upgrade to patched releases.
Apple Plans a More Deliberate Consent Step for Mac’s Full Disk Access
Apple plans explicit consent for Mac Full Disk Access amid AI agent risks, covering files, mail and messages; no timeline or macOS version yet.
Six Dell CSM Flaws Expose Storage Credentials, Tenant Controls, and Kubernetes Nodes
Dell patched six critical CSM flaws, including two CVSS 10.0 bugs enabling credential theft, token forgery, tenant takeover and Kubernetes root access.
Microsoft’s X Account Was Used to Boost a Clippy-Branded Crypto Token
Microsoft confirmed its X account was hijacked to promote $Clippy crypto token. It removed posts, secured account, disavowed endorsement.
Mabna Institute Case Brings Alleged University-Hacking Suspect to the United States
Amir Barati extradited from Montenegro to US over alleged Mabna Institute spearphishing campaign stealing university research for IRGC.
Four Monta Platform Flaws Put Charging-Station Access and Availability at Risk
CISA warns four Monta monta.app flaws (CVSS 9.4) allow station impersonation, credential exposure, DoS and unauthorized charging control.
Meari OpenAPI Authorization Gaps Expose Device Controls and Sensitive Data
CISA disclosed two Meari OpenAPI authorization flaws enabling authenticated users to alter device configs and access shadows, with no fix planned.