BeyondTrust Critical Pre-Auth RCE Flaw Exposes Thousands of Instances
BeyondTrust discloses CVE-2026-1731, a critical 9.9 CVSS pre-auth RCE flaw affecting Remote Support and Privileged Remote Access with 11,000 exposed instances.
Read more →Latest cybersecurity news, vulnerabilities, and threat intelligence
BeyondTrust discloses CVE-2026-1731, a critical 9.9 CVSS pre-auth RCE flaw affecting Remote Support and Privileged Remote Access with 11,000 exposed instances.
Read more →
Rapid7 attributes Notepad++ supply chain attack to Chinese APT Lotus Blossom. Chrysalis backdoor deployed to targets across Asia and Americas.
Read more →
Attackers compromised eScan antivirus update servers, deploying multi-stage malware to hundreds of systems across Asia.
Read more →
Two US cybersecurity professionals plead guilty to operating as BlackCat ransomware affiliates, extorting $1.2M from victims including healthcare organizations. Face 20 years in prison.
Read more →
Critical CVE-2026-0625 (CVSS 9.3) in legacy D-Link DSL routers actively exploited. Unauthenticated attackers can execute commands and hijack DNS. No patches available.
Read more →
Chinese-linked threat actors exploit three VMware ESXi zero-days (CVE-2025-22224, CVSS 9.3) to escape VMs and compromise hypervisors using sophisticated MAESTRO toolkit.
Read more →
Microsoft reveals AI-generated phishing emails achieve 54% click rates vs 12% for traditional phishing - a 4.5x increase making campaigns 50x more profitable for attackers.
Read more →
Aflac confirms 22.65 million individuals affected by June 2025 cyberattack. Stolen data includes SSNs, health information, and government IDs. Scattered Spider suspected.
Read more →
Yahoo Mail and AOL services down for 27,700+ users worldwide with 'Edge: Too many requests' error. Rate limiting misconfiguration suspected as cause.
Read more →
Critical Chainlit AI framework flaws CVE-2026-22218 and CVE-2026-22219 enable attackers to steal cloud credentials and sensitive data via file read and SSRF attacks.
Read more →