Emergency patches fix critical bugs in Nginx
Seen on exploit.in: Source: exploit.in. The original article appeared in Russian at rakep.ru.
Hackers scanning systems for recently-patched Oracle flaw
Bleeping Computer reports: Attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite (EBS) vulnerability. Discovered in a core component of EBS’s Application Object Library and tracked as CVE-2026-101767, this flaw lets unauthenticated threat actors with HTTP network access take over vulnerable systems in low-complexity attacks. Oracle released […]
US, Australia warn of latest Citrix vulnerability after NetScaler advisory
Another new vulnerability is giving cybercriminals the ability to crash Citrix NetScaler appliances, as The Record reports: Customers began reporting strange exploitation incidents on Friday, even on appliances that were up to date on all patches. Citrix confirmed late on Friday that it was “tracking a newly observed issue” related to some customer-managed NetScaler deployments […]
‘WP2Shell’ Opens Millions of WordPress Sites to Remote Takeover
If you haven’t patched already, get busy. DarkReading reports: Attackers have begun widely exploiting two critical vulnerabilities in WordPress that, when chained, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites. The attacks are being fueled by the ready availability of numerous proof-of-concept exploits for the two bugs, identified as CVE-2026-60137 and CVE-2026-63030. Researchers at […]
Ransomware hackers are now targeting victims with an infrastructure-driven approach
Cybersecurity Insiders reports: Cyberattacks have long evolved in waves, with ransomware groups historically choosing their victims based on industry type or company size. Financial institutions, healthcare providers, and large enterprises were often prime targets due to their ability to pay hefty ransoms. However, a new trend is emerging that signals a shift in attacker strategy. […]
Someone has publicly leaked an exploit kit that can hack millions of iPhones
TechCrunch reports: Last week, cybersecurity researchers uncovered a hacking campaign targeting iPhone users that used an advanced hacking tool called DarkSword. Now someone has leaked a newer version of DarkSword and published it on the code-sharing site GitHub. Researchers are warning that this will allow any hacker to easily use the tools to target iPhone users running […]
14,000 routers are infected by malware that’s highly resistant to takedowns
Ars Technica reports: Researchers say they have uncovered a takedown-resistant botnet of 14,000 routers and other network devices—primarily made by Asus—that have been conscripted into a proxy network that anonymously carries traffic used for cybercrime. The malware—dubbed KadNap—takes hold by exploiting vulnerabilities that have gone unpatched by their owners, Chris Formosa, a researcher at security […]
Google discovers two zero-days already under attack: Update Chrome NOW
The Register reports: Google has pushed out an emergency Chrome update to fix two previously unknown vulnerabilities that attackers were already exploiting before the patches landed. The bugs, tracked as CVE-2026-3909 and CVE-2026-3910, affect core components of the browser and have prompted the usual warning from Google that technical details will remain under wraps until […]
Consumers: Check Your iOS version now
From the Google Threat Intelligence Group: Google Threat Intelligence Group (GTIG) has identified a new and powerful exploit kit targeting Apple iPhone models running iOS version 13.0 (released in September 2019) up to version 17.2.1 (released in December 2023). The exploit kit, named “Coruna” by its developers, contained five full iOS exploit chains and a total of […]
Fed agencies ordered to patch Dell bug by Saturday after exploitation warning
The Record reports: A Chinese state-backed hacking group is targeting Dell customers with a zero-day vulnerability impacting a popular line of operational and disaster recovery tools. Dell and Google released notices on Tuesday about CVE-2026-22769, warning that a sophisticated Chinese actor has been targeting the bug since at least mid-2024. Dell’s advisory said the vulnerability carries a […]