[ad_1] Ravie LakshmananApr 20, 2026Open Source / Server Security A critical security vulnerability has been disclosed in SGLang that, if successfully exploited, could result in remote code execution on susceptible …
SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files Read More
[ad_1] In a cascading illustration of unintended consequences, threat actors compromised an AI tool vendor, then used that access this past weekend to compromise software security vendor Vercel, and possibly …
Vercel Employee’s AI Tool Access Led to Data Breach Read More
[ad_1] Tal Be’ery knew that I was online the night before I called him. He knew what kind of device I was using. I didn’t share this information with him. …
WhatsApp Leaks User Metadata to Attackers Read More
[ad_1] Ravie LakshmananApr 20, 2026Cybersecurity / Hacking Monday’s recap shows the same pattern in different places. A third-party tool becomes a way in, then leads to internal access. A trusted …
⚡ Weekly Recap: Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & More Read More
[ad_1] Cybersecurity researchers have flagged a new malware called ZionSiphon that appears to be specifically designed to target Israeli water treatment and desalination systems. The malware has been codenamed ZionSiphon …
Researchers Detect ZionSiphon Malware Targeting Israeli Water, Desalination OT Systems Read More
[ad_1] Ravie LakshmananApr 18, 2026IoT Security / Vulnerability Threat actors are exploiting security flaws in TBK DVR and end‑of‑life (EoL) TP-Link Wi-Fi routers to deploy Mirai-botnet variants on compromised devices, …
Mirai Variant Nexcorium Exploits CVE-2024-3721 to Hijack TBK DVRs for DDoS Botnet Read More
[ad_1] The chilly air-conditioned Scottsdale ballroom hardly stirred while Harold Booth, program manager for NIST’s National Vulnerability Database (NVD), discussed a major operational change — his organization is scaling back …
How NIST’s Cutback of CVE Handling Impacts Cyber Teams Read More
[ad_1] OPINION On March 10, 2026, Microsoft patched CVE-2026-26144a cross-site scripting (XSS) vulnerability in Excel. XSS in Office isn’t anything new, but what makes this XSS different is what happens after …
Every Old Vulnerability Is Now an AI Vulnerability Read More
[ad_1] The US Coast Guard’s first-ever mandatory cybersecurity framework for ports, vessels, and offshore facilities has taken effect, ending two decades of voluntary compliance and putting operators on a countdown …
Coast Guard’s New Cybersecurity Rules Offers Lessons for CISOs Read More
[ad_1] Ravie LakshmananApr 17, 2026Vulnerability / Endpoint Security Huntress is warning that threat actors are exploiting three recently disclosed security flaws in Microsoft Defender to gain elevated privileges in compromised …
Three Microsoft Defender Zero-Days Actively Exploited; Two Still Unpatched Read More