LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root
î „Ravie Lakshmananî ‚May 23, 2026Vulnerability / Web Security A maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active…
First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups
Authorities in Europe and North America have announced the dismantling of a criminal virtual private network (VPN) service used by…
Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware
î „Ravie Lakshmananî ‚May 22, 2026Malware / Artificial Intelligence The Belarus-aligned threat actor known as Ghostwriter (aka UAC-0057 and UNC1151Ukraine’s National Security…
Making Vulnerable Drivers Exploitable Without Hardware
1 Introduction This article provides a technical analysis of how many Windows kernel mode drivers can be interacted with from…
Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows
Cybersecurity researchers have disclosed details of a new automated campaign called Megalodon that has pushed 5,718 malicious commits to 5,561…
Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attacks
î „Ravie Lakshmananî ‚May 22, 2026Cybercrime / Law Enforcement The U.S. Department of Justice (DoJ) on Thursday announced the arrest of a…
CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV
î „Ravie Lakshmananî ‚May 22, 2026Vulnerability / Cyber Attack The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security…
Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access
î „Ravie Lakshmananî ‚May 22, 2026Vulnerability / Network Security Cisco has rolled out updates for a maximum-severity security flaw impacting Secure Workload…
Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor
î „Ravie Lakshmananî ‚May 21, 2026Cyber Espionage / Threat Intelligence Cybersecurity researchers have disclosed details of a new Linux malware dubbed Showboat…
Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories
î „Ravie Lakshmananî ‚May 21, 2026Hacking News / Cybersecurity News This week starts small. A token leaks. A bad package slips in….