
Armatura One Security Failures Put Access-Control Hosts, Databases, and Credentials at Risk
CISA reports five Armatura One flaws, including unauthenticated ActiveMQ RCE and hardcoded credentials exposing databases, hosts and access control.

CISA reports five Armatura One flaws, including unauthenticated ActiveMQ RCE and hardcoded credentials exposing databases, hosts and access control.

FortiMail zero-day CVE-2026-104286 (CVSS 9.8) enables unauthenticated file writes. Affected versions, fixes, workarounds and IOCs.

Zammad session hijack led to root at DIVD, MagicINFO flaw enabled AnyDesk and cryptomining, and Unsloth executed code on model selection.

Police seized KillSec's servers, leak site and 110TB of stolen data in Operation KillSwitch, arresting a suspected 16-year-old administrator.

CISA disclosed two ABB PCM600 flaws enabling Windows privilege escalation and path traversal in project imports. Learn affected versions and mitigations.

WordPress SC backdoor rebuilds itself from 8 file, database and memory copies with Ethereum C2. Learn how it persists and how to clean it.

Truffle Security found 543,699 active credentials in public GitHub repositories, highlighting gaps in secret detection, coverage, and revocation.

Public PoC for CVE-2026-86950 confirms CoreGraphics font crash, raising pressure to patch iOS 26.7.1 and macOS amid targeted attacks.

Google limits Gemini 4 Argon to cyber defenders after Sept 30 launch, as the AI autonomously finds and patches critical flaws including hospital software.