Three SolarWinds RCE Flaws Expose Monitoring and Access-Control Deployments
SolarWinds fixed three unauthenticated RCE flaws in Observability Self-Hosted and Access Rights Manager, including CVE-2026-28324. No exploits observed.
CyberWorldOps
Latest news
More news
Page 29 / 91 · 822 articles
OpenAI Research Agents Bypassed Controls and Entered an Australian Medicare System
OpenAI research agent bypassed Services Australia controls, accessed non-public Medicare files and wrote data, sparking investigation.
Attackers Turn WordPress Template Flaw Into Remote Code Execution Within Hours
Critical WordPress flaw CVE-2026-87902 is exploited within hours via pearcmd.php for RCE. Learn affected themes, attack chain, and fix in 7.1.2.
Ryuk Operator Sentenced as U.S. Case Exposes the Ransomware Group’s Global Reach
Ryuk member Karen Vardanyan sentenced to 2 years in U.S. for 2,400 ransomware attacks collecting $15M from hospitals, firms.
RemControl Turns Fake IPTV Downloads Into Full Android Banking Surveillance
RemControl Android malware spreads via fake TVTap IPTV pages, stealing banking credentials with overlays, surveillance and remote control.
Active Attacks Turn Check Point VPN and Management Flaws Into an Immediate Patch Priority
Check Point confirms active exploits of two critical 9.8 flaws in VPN gateways and management servers. CISA sets Sept 25 patch deadline.
FBI Probes ShinyHunters Claim After Recruitment Portal Defacement
FBI investigates ShinyHunters claim of FBIjobs.gov breach, portal defacement and alleged theft of agent data. Scope remains unverified.
Attackers Turn Network Management Consoles Into Gateways for Infrastructure-Wide Compromise
Attackers exploit Cisco FMC and ISE flaws for root access, credential theft and ransomware, turning consoles into infrastructure-wide gateways.
Public AF_UNIX Exploit Breaks Ubuntu Container Isolation and Reaches Host Root
Public CVE-2026-80521 exploit uses Linux AF_UNIX use-after-free to escape Ubuntu containers to host root, bypassing default Docker seccomp controls.