Critical Red Hat Satellite Flaw Could Enable Root Password Theft and Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Red Hat has fixed a high-impact vulnerability in Red Hat Satellite that could allow a low-privileged authenticated user to access sensitive host information, including root passwords. Under unsafe configurations, the flaw could also escalate to arbitrary command execution as the …

Multiple Cpanel/WHM Vulnerabilities Allow Arbitrary Command Execution On Server

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multiple security flaws in cPanel & WHM could let attackers run malicious scripts in an administrator’s browser session or execute arbitrary commands as root. The vulnerabilities were disclosed on September 29, 2026, and affect all supported cPanel & WHM versions …

OpenClaw Launches Free Open-source Enterprise Agent Platform for AI Agents

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenClaw has launched OpenClaw Enterprise (OCE), a free, open-source platform that helps organizations run persistent AI agents with stronger security and central oversight. Announced on September 29, 2026, the project targets businesses that want agents to handle ongoing work without …

Exposed WordPress Backups Became a Gold Mine of AWS and Email Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Exposed WordPress backups have become a valuable source of cloud and email credentials for attackers using a toolkit called TIKTOUK. Rather than relying on one technique, its components search websites for sensitive files, recover stored passwords, and collect secrets from …

Zammad 0-Day Vulnerabilities Exploited to Gain Remote Code Execution and Root Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two critical Zammad zero-day flaws, reportedly exploited against the Dutch Institute for Vulnerability Disclosure (DIVD), could allow session hijacking, remote command execution as the Zammad service user, and potential root privilege escalation. The vulnerabilities are tracked as CVE-2026-102489 and CVE-2026-102490. …

Free iCloud Account Could Let Attackers Spoof Any @icloud.com Address and Pass Email Security Checks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researcher Timo Longin, working with the SEC Consult Vulnerability Lab, disclosed two email spoofing flaws in Apple’s iCloud mail infrastructure that could have let someone with a free iCloud account send messages that appeared to come from any @icloud.com …

Sony Rolls Out PS5 Security Update Following the Release of Relapse Jailbreak

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Sony has moved to protect PlayStation 5 consoles with its latest system software update, as the newly released Relapse jailbreak draws attention to a broad set of older PS5 firmware versions. The update matters for console owners because the public …

Session Cookie Vulnerability Lets Attackers Bypass Entra ID MFA and Impersonate Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A flaw in a custom session-cookie system allowed an unauthenticated attacker to pose as employees and administrators in a yard management platform. The issue did not break Microsoft Entra ID itself. Instead, it let a weak application-side session layer accept …

Critical Capacitor Flaw Lets Malicious Links Access App Data and Native Features

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in Capacitor for Android and iOS could let a malicious link opened inside an affected mobile app load attacker-controlled web content at the application’s trusted origin. The issue, tracked as CVE-2026-103922, can expose app data stored in …

Safari History Database Tags Can Reveal What Users Were Browsing on macOS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A little-known Safari database feature could give digital forensic investigators another way to understand browsing activity on macOS. Safari’s History database can store automatically generated topic tags for some webpages, potentially revealing themes a user explored even when the original …