SecurityWeek (59 minutes ago)
Investigators seized 235 servers and 257 domains, along with 6.4 million victim credentials as part of Operation Endgame.
Read the full story on SecurityWeek.
Check Point Software has released emergency hotfixes to address a high-severity flaw that hackers have been exploiting to gain root privileges and establish persistence on vulnerable devices since late October.
It’s not promoted very much, but Bitdefender’s stand-alone Antivirus Plus software is both effective and affordable.
Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.
It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.
An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then a previously reported local privilege escalation flaw in Gaia OS to deploy a backdoor called TSGA.
PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.
Daybreak Red Team pentests web applications with AI agents, while Defense Factory investigates security findings and prepares patches.
Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges.
Also Thursday, the FBI blamed North Korea for a separate social engineering scheme that officials say resulted in the theft of $400 million worth of cryptocurrency.
Microsoft says failed server health checks disrupted Outlook and other Microsoft 365 services. The company is still investigating the cause and has disclosed no evidence of a cyberattack.
65 active sources
20 Turkish · 45 English
All sources
