Drupal Fixes Critical Field UI RCE Reachable Without Login Through Add-Ons
Drupal patched a critical Field UI flaw that could allow remote code execution via contributed modules, including without login. Update to fixed releases.
CyberWorldOps
Latest news
More news
Page 9 / 91 · 822 articles
Unsaved Domestic Calls to Show Registered Names on India’s 4G and Newer Networks From November 1
India will require telecoms to display registered caller names on 4G and newer networks from November 1, 2026, using CNAP for unsaved domestic calls.
Attackers Target Langflow RCE CVE-2026-105740 as Honeypot Activity Accelerates
Honeypot data shows attempts to exploit Langflow CVE-2026-105740, an authenticated MCP command-injection flaw, as activity accelerates.
Attackers Turn Grocery Refrigeration Systems Into Heaters Across More Than 400 Stores
Attackers remotely altered refrigeration controllers in 400+ European stores, raising temperatures and spoiling stock via third-party access.
Cisco SEG flaw CVE-2026-76519 enables unauthenticated root command execution
Cisco discloses actively exploited CVE-2026-76519 in Secure Email Gateway enabling unauthenticated root command execution via malicious attachment.
Ledger Halts Asian Reseller Sales After Wallet Implants Capture Recovery Phrases
Ledger halted reseller sales in seven Asian markets after confirming CryptoBilis wallets had implants capturing recovery phrases.
Polish Probe Says NSO Retained Technical Access to Poland’s Pegasus System
Polish prosecutors found CBA lacked full control of Pegasus as NSO retained infrastructure access and data routed abroad, with no proof of specific access.
Anthropic’s AI Worm Experiment Spreads a Model Across a Simulated Device Network
Anthropic simulated an AI-directed worm where GLM-5.2 spread Llama across Android-like devices, plus a separate Gemma test on TV boxes.
UK Freezes Cryptomus Assets Over Russia-Linked Cryptocurrency Payment Processing
UK froze Cryptomus assets and barred business ties over alleged Russia-linked crypto payments and reported disruption.