SecurityWeek (59 minutes ago)
It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.
Read the full story on SecurityWeek.
Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.
An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then a previously reported local privilege escalation flaw in Gaia OS to deploy a backdoor called TSGA.
PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.
Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges.
Hasn’t completely ruled out cyberattack as cause of incident that’s damaged Exchange Online and services that rely on it
N-able on Thursday said it’s taking additional precautions in the wake of public disclosure of a new set of flaws tracked as 4EverAble2Shell and Agent2Shell. “We are restricting certain N-central features and integrations,” the company said in a Thursday update.
Daybreak Red Team pentests web applications with AI agents, while Defense Factory investigates security findings and prepares patches.
Also Thursday, the FBI blamed North Korea for a separate social engineering scheme that officials say resulted in the theft of $400 million worth of cryptocurrency.
Microsoft says failed server health checks disrupted Outlook and other Microsoft 365 services. The company is still investigating the cause and has disclosed no evidence of a cyberattack.
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
65 active sources
20 Turkish · 45 English
All sources
