Tenda CVE-2026-11405: Hidden Router Backdoor Has No Patch
CERT/CC warns that several Tenda router firmware builds contain a hidden admin backdoor. No patch is available, so owners should disable remote management and...
Scam library
Phishing Scams: Tips to Spot and Prevent
Recent phishing, fake store, and scam website reports, arranged for quick checking without oversized preview images.
Januscape CVE-2026-53359: Patch KVM/x86 Host Escape Flaw
Januscape CVE-2026-53359 affects Linux KVM/x86 hosts with nested virtualization. Patch KVM kernels or disable nested virtualization for untrusted guests.
OpenSSH 10.4 Fixes SFTP, SCP, and sshd Security Bugs
OpenSSH 10.4/10.4p1 fixes security bugs in sftp, scp, and sshd. Linux and Unix administrators should update and review a few configuration-sensitive cases.
ClamAV 1.5.3 and 1.4.5 Fix Seven Scanner Bugs
ClamAV 1.5.3 and 1.4.5 patch seven scanner vulnerabilities affecting malware-scanning deployments, including Cisco Secure Endpoint connectors.
TeamPCP Supply Chain Attack: FBI Warns on Dev Tools
The FBI warns that TeamPCP compromised trusted developer and security tools to steal cloud tokens, SSH keys, and Kubernetes secrets from CI/CD environments.
FatFs CVE-2026-6682: Seven Bugs Hit Embedded Devices
Seven FatFs vulnerabilities, led by CVE-2026-6682, expose embedded devices that parse FAT or exFAT media through USB, SD cards, or firmware update flows.
PolinRider Supply Chain Attack Hits 108 Developer Packages
North Korea-linked PolinRider activity has spread across npm, Packagist, Go modules, and a Chrome extension. Developers should audit IDE tasks, config files, package releases,...
Bad Epoll CVE-2026-46242: Patch Linux Kernel Root Flaw
Bad Epoll (CVE-2026-46242) is a Linux kernel epoll use-after-free that can give local users root. Patch affected kernels and verify vendor backports.
JADEPUFFER AI Ransomware: Patch Exposed Langflow Servers
Sysdig documented JADEPUFFER, an AI-agent ransomware operation that used exposed Langflow CVE-2025-3248 access to steal secrets, pivot to Nacos, and destroy database configurations.
Citrix NetScaler CVE-2026-8451: Patch SAML IdP Memory Leak
Citrix NetScaler ADC and Gateway builds need urgent review for CVE-2026-8451, a SAML IdP memory-overread flaw with CitrixBleed-style risk.
Argo CD Repo-Server RCE: Lock Down Kubernetes NetworkPolicy
Synacktiv disclosed an unpatched Argo CD repo-server attack path that can lead to Kubernetes cluster takeover when internal ports are reachable. Admins should verify...
SharePoint Server CVE-2026-45659 Added to CISA KEV
CISA has added Microsoft SharePoint Server CVE-2026-45659 to KEV after evidence of exploitation. On-prem SharePoint admins should verify fixed builds and triage exposed servers...
