Security news

Stories are collected automatically from public feeds, attributed to their original publishers and linked. Editors can remove anything. Always read the original source.

vulnerabilityvia Exploit-DB (latest)

[webapps] Wolf CMS 0.8.3.1 - RCE v

Wolf CMS 0.8.3.1 - RCE v

Sep 1, 2026 UTC

vulnerabilityvia Exploit-DB (latest)

[webapps] Grav CMS 2.0.7 - RCE

Grav CMS 2.0.7 - RCE

Sep 1, 2026 UTC

vulnerabilityvia Exploit-DB (latest)

[remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE

CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE

Aug 25, 2026 UTC

vulnerabilityvia Exploit-DB (latest)

[remote] PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE

PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE

Oct 22, 2026 UTC

vulnerabilityvia Exploit-DB (latest)

[webapps] Open eClass 3.15 - RCE

Open eClass 3.15 - RCE

Oct 21, 2026 UTC

vulnerabilityvia Exploit-DB (latest)

[remote] Ecava_ntegraXor IGX_16.0.701.10 - RCE

Ecava_ntegraXor IGX_16.0.701.10 - RCE

Oct 1, 2026 UTC

vulnerabilityvia Exploit-DB (latest)

[webapps] InvoicePlane 1.7.1 - RCE

InvoicePlane 1.7.1 - RCE

Oct 1, 2026 UTC

ransomwarevia CSO Online

When prevention fails: Why cyber resilience is the next big test of trust

Imagine arriving at work on a Monday morning to find employees cannot log in, customer service is unavailable, and critical business applications have stopped working. Security ale...

Oct 28, 2026 UTC

vulnerabilityvia CSO Online

10 ways attackers abuse AI services to hack your business

Attackers are starting to exploit AI systems to mount attacks in the same way they once relied on built-in enterprise tools such as PowerShell. Instead of relying on malware, cybe...

Oct 28, 2026 UTC

supply-chainvia CSO Online

Attackers compromised 42 GitHub repositories by using files too large to be searched

A security research firm reported Monday that it had identified breaches of 42 third-party GitHub repositories in which attackers had deployed payload blobs large enough “to evade...

Oct 28, 2026 UTC

vulnerabilityvia CSO Online

Attackers built a ‘Skynet’ AI agent that hijacks exposed models to run cyberattacks

Skynet is no longer a fictional adversary. Attackers have built an offensive agent that exploits unprotected AI models on the web with a ‘Skynet’ directive that allows them to run...

Oct 28, 2026 UTC

vulnerabilityvia CSO Online

Node2Shell puts Microsoft and Node.js on Brotli patch duty

A vulnerability in Google’s Brotli compression library could allow attackers to execute arbitrary code in applications that use an affected Brotli decoder to process compressed dat...

Oct 27, 2026 UTC