Category: CYBER SECURITY

More than 36,000 internet-exposed Plex Media Servers remain unpatched against recently disclosed security flaws, prompting Plex to urge users to update immediately.

cPanel has patched CVE-2026-67401, a security flaw that could allow an authenticated hosting account to create files and execute code as root on affected servers.

A new ShieldCrash zero-day exploit targeting Microsoft Defender has been released after Microsoft's September 2026 security updates.

An Ohio man has been sentenced to 15 years in prison after using AI platforms to create explicit images and videos of victims as part of a cyberstalking and sextortion campaign.

Security researchers developed a WeChat worm that can spread through incoming calls without requiring victims to answer or touch their phones.

Check Point researchers found that a hidden instruction in ChatGPT could secretly access connected Gmail data and transfer information between isolated ChatGPT environments.

Claude users are reporting unexplained token usage after attackers allegedly stole login sessions using infostealer malware.

Grindr has agreed to pay £26 million to settle a U.K. privacy lawsuit over allegations that it shared sensitive user information, including HIV status, with third parties.

Adobe has patched CVE-2026-75650, a critical Magento and Adobe Commerce flaw rated 10.0 that attackers are actively exploiting to execute code and deploy backdoors.

More than 220 million passenger and crew records containing passport and detailed flight information were exposed through a misconfigured database apparently linked to Vietnam.

Cybersecurity researchers have uncovered new details about JSCeal, a sophisticated malware built from compiled V8 JavaScript that can steal browser credentials, spy on victims, and intercept web traffic.

A new Magento zero-day called StyleSmuggler is being actively exploited, allowing attackers to run malicious code on online stores without logging in.

Microsoft warns that a large phishing campaign is using invisible Unicode characters to split financial keywords and evade email security filters.

PostgreSQL has patched CVE-2026-6471, a long-standing flaw that could allow replication users to execute arbitrary code on database servers.

Plex urges users to update Plex Media Server and Plex Desktop after releasing fixes for multiple security vulnerabilities.

Thomson Reuters says an unauthorized party accessed C-Track court files affecting courts across 11 U.S. states, the U.S. Virgin Islands and Ontario.

Google has patched an actively exploited Chrome zero-day vulnerability in V8 along with 11 other security flaws.

DScan is facing lawsuits after more than 153 million U.S. and Canadian driver’s license scans were allegedly offered for sale on the dark web.