Tag Archive

A public exploit package now lets owners of Amazon’s third-generation Fire TV Cube gain persistent root access and unlock the bootloader on firmware PS7717 or older. Released by XDA developer Pro-me3us, the project targets devices known as “gazelle”. It combines …

Progress released urgent security updates for MarkLogic Server to fix a broad set of critical and high-severity flaws that could let attackers gain elevated access, create unauthorized administrator accounts, execute code on servers, steal credentials, and access protected data. The …

MariaDB has disclosed security flaws that, under specific conditions, could let attackers run code, access restricted database tables, and steal login credentials. The issues affect several server branches and MariaDB Connector/C. Although the headline describes a critical risk, the vendor …

Kimsuky is using GitHub and other trusted code platforms to deliver malware, run commands, and steal data from Ukrainian experts in diplomacy, security, and international policy. The North Korea-linked group’s Operation GitPower combines targeted emails, fake PDF files, and Windows …

A critical SonicWall SMA1000 flaw, CVE-2026-102255 (CVSS 10.0), is being actively exploited days after disclosure, allowing unauthenticated attackers to make vulnerable appliances send requests on their behalf. Threat intelligence firms detected exploitation attempts beginning October 8, two days after SonicWall …

Canonical, the company behind Ubuntu Linux, suffered a sustained distributed denial-of-service attack on October 8, 2026, disrupting its main websites and security information services. The outage lasted four hours and 12 minutes, according to OMG! Ubuntu. It was Canonical’s second …

Yandex has confirmed a major service outage after drone attacks damaged three data centers in Russia, leaving some users unable to access cloud files. Two facilities stopped operating, while a third lost part of its infrastructure. The disruption affected Yandex …

Attackers are targeting a critical security flaw in the Bricksforge WordPress plugin that lets them upload and run arbitrary PHP code without logging in. Tracked as CVE-2026-85097, the vulnerability carries a maximum CVSS score of 10.0 and can lead to …

Security researchers have disclosed four serious vulnerabilities in LG webOS smart TVs that could allow an attacker to bypass authentication, create a privileged account, and ultimately execute commands with root-level access. The flaws, tracked as CVE-2023-6317 through CVE-2023-6320, affect selected …