Cisco ISE API Authentication Flaw Opens a Remote Path to Root Access
Cisco warns of exploited CVE-2026-76460 in ISE with CVSS 10.0 enabling unauthenticated remote root access. See affected versions, patches, mitigations.
CyberWorldOps
Latest news
More news
Page 38 / 93 · 837 articles
One Shared JWT Secret Exposes Issabel PBX Servers to Remote Command Execution
CVE-2026-89026 in Issabel Framework lets unauthenticated attackers forge JWTs with a hard-coded key and execute commands as Asterisk via pbxapi.
Spain Investigates a Data Breach in Which an AI Agent Chained Multiple Attack Stages
Spain's AEPD investigates first reported data breach where an AI agent chained login, vulnerability search, data alteration and invoice access.
Siemens Reyrolle 7SR5 Flaws Expose Energy Devices to Authentication Bypass and Remote Crashes
CISA warns 14 flaws in Siemens Reyrolle 7SR5 before V2.70, including critical CVE-2026-62645 auth bypass and remote crash bugs. Upgrade advised.
CHOSEN BRICK Turns Trusted Chats Into a Surveillance Channel for Iranian Operators
US, UK and Dutch agencies expose CHOSEN BRICK, Iranian Windows malware spreading via WhatsApp and Telegram to spy on dissidents, journalists and activists.
CareCam Camera Flaws Open Paths to Live Video, Root Access and Wi-Fi Credential Theft
Seven flaws in CareCam CM2507 cameras expose live video, ONVIF access, root passwords and Wi-Fi credentials, risking surveillance and network compromise.
NightEagle, Hacking Cat, and Toy Ghouls Target Russian Networks
Kaspersky reports NightEagle, Hacking Cat and Toy Ghouls targeting Russian firms with Exchange exploits, backdoors, ransomware and wipers.
Google Patches Pixel Modem Zero-Day Exploited in Targeted Attacks
Google patched CVE-2026-58704, a Pixel modem privilege-escalation zero-day exploited in targeted attacks and added to CISA's KEV catalog.
Critical Events Calendar Flaws Put More Than 200,000 WordPress Sites at Risk
Two critical 9.8 RCE flaws in The Events Calendar plugin expose 200,000+ WordPress sites. Update to version 6.17.4.1 to fix both vulnerabilities.