BleepingComputer (49 minutes ago)
Linux eBPF rootkits can hide malicious activity and evade traditional detection methods without loading kernel modules. Flare reveals how these techniques are spreading through underground forums, where threat actors are sharing rootkit source code, tutorials, and exploits targeting Linux systems.
Read the full story on BleepingComputer.
The authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Attackers are using Alibaba Cloud to host self-managed instances of AntiFox, an open-source agentic penetration testing platform, to target web services and AWS environments.
KB5132061 throws 0x800F0993 and 0x800F0989 errors, and Redmond is saying nothing
A zero-day in a cloud provider’s infrastructure granted attackers access to paid AI models and in a single day they raked up hundreds of thousands in expenses.
Every company needs to attack its own systems with AI hacking tools within about 90 days, or hackers will get in first. That is the warning from Alex Stamos, chief security officer at Cognition.
The hole was plugged and attackers ousted but the investigation continues.
N-able released hotfixes to address zero-day bugs affecting its N-central remote monitoring and management (RMM) platform, which were publicly disclosed over the weekend and forced it to take vulnerable hosted environments offline.
Microsoft says the November 2026 cumulative updates resolve USB audio issues plaguing Windows users who have installed security updates released since September.
The US Cybersecurity and Infrastructure Security Agency (CISA) warned on Tuesday that hackers are now exploiting a high-severity Cisco BroadWorks vulnerability in attacks.
Microsoft has fixed Outlook sign-in and mail delivery issues on Exchange Server systems after installing the October 2026 Windows Server security updates.
65 active sources
20 Turkish · 45 English
All sources
