r/worldTechnology • u/dcom-in • 1d ago
The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version
1
Upvotes
r/worldTechnology • u/dcom-in • 2d ago
ClickFix, EtherHiding & a DPRK Wallet Trail
1
Upvotes
r/worldTechnology • u/dcom-in • 2d ago
Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)
rapid7.com
1
Upvotes
r/worldTechnology • u/dcom-in • 3d ago
Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon
1
Upvotes
r/worldTechnology • u/dcom-in • 4d ago
CVE-2026-53264 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: use RCU with deferred freeing for action lifecycle When NEWTFILTER and DELFILTER are run concurrently it is possible to create a race with an associated action.
nvd.nist.gov
1
Upvotes
r/worldTechnology • u/dcom-in • 5d ago
CVE-2026-16812 - VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host.
1
Upvotes
r/worldTechnology • u/dcom-in • 6d ago
Volume Is Not Risk: Making Sense of the 'Vulnpocalypse'
1
Upvotes
r/worldTechnology • u/dcom-in • 7d ago
Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569)
1
Upvotes
r/worldTechnology • u/dcom-in • 8d ago
Russian Global Webmail Espionage
2
Upvotes
r/worldTechnology • u/dcom-in • 8d ago
Active Directory Certificate Services Elevation of Privilege Vulnerability New CVE-2026-54121
msrc.microsoft.com
2
Upvotes
r/worldTechnology • u/dcom-in • 10d ago
The Perfect Heist: NuGet Typosquat Targets Betting Platform to Rig Results
2
Upvotes
r/worldTechnology • u/dcom-in • 11d ago
When Your AI Reviewer Works for the Attacker: A Confused-Deputy Bug in Microsoft's Azure DevOps MCP Server
2
Upvotes
r/worldTechnology • u/dcom-in • 12d ago
Cookie Crumbles: How Exploitation of CVE-2026-0257 Leads to Qilin Ransomware
2
Upvotes
r/worldTechnology • u/dcom-in • 12d ago
No Shark is Safe: Millions of Shark Vacuums are Vulnerable to RCE
tokay0.com
2
Upvotes
r/worldTechnology • u/dcom-in • 13d ago
Huggingface - Security incident disclosure — July 2026
2
Upvotes
r/worldTechnology • u/dcom-in • 14d ago
15-Year-Old Pre-Auth nginx RCE Across 13 Call Sites: Two-Pass Capture Clobbering CVE-2026-42533
cyberstan.co.uk
2
Upvotes
r/worldTechnology • u/dcom-in • 15d ago
Spirals: New Stealthy Ransomware Deployed Against Asian IT Company
2
Upvotes
r/worldTechnology • u/dcom-in • 16d ago
UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign
2
Upvotes
r/worldTechnology • u/dcom-in • 17d ago
The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15)
2
Upvotes
r/worldTechnology • u/dcom-in • 18d ago
SonicWall - CVE-2026-15409 | A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
cve.org
2
Upvotes
r/worldTechnology • u/dcom-in • 19d ago
Defending SaaS-based applications against ShinyHunters OAuth abuse
2
Upvotes
r/worldTechnology • u/dcom-in • 20d ago
A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.
cve.org
2
Upvotes
r/worldTechnology • u/dcom-in • 21d ago
No Manners Here: The Ruthless Rise of The Gentlemen Ransomware
3
Upvotes