Critical MikroTik RouterOS Flaw Lets Unauthenticated Attackers Execute Code as Root

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in MikroTik RouterOS could allow unauthenticated remote attackers to execute arbitrary code with root-level privileges or trigger a denial-of-service condition. The flaw, tracked as CVE-2026-84411, affects MikroTik RouterOS versions before 7.24 and has a CVSS v3 severity …

Over 543,000 GitHub Credentials Remain Active After Being Publicly Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An analysis of public GitHub code has uncovered 543,699 unique credentials that remained valid when researchers tested them on July 27 and 28, 2026. The findings expose a secret-management failure: credentials can remain usable for years after developers publish them, …

Critical TeamViewer Vulnerabilities Enable Code Execution Attacks Via Remote Session

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TeamViewer has released security updates to fix five high-severity vulnerabilities affecting its Full Client, Host, and related components across Windows, Linux, and macOS. The most serious issue could allow attackers to bypass configured remote-session permissions and potentially execute code on …

New 2CLoader Malware Evades Security Tools to Deploy Vidar and Remus Stealers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

2CLoader is a newly identified malware loader that helps attackers place credential-stealing programs on Windows computers. The loader was first seen in August 2026 and has mainly distributed the Vidar and Remus information stealers, alongside XWorm RAT. These threats can …

Cisco SD-WAN Manager Authentication 0-day Vulnerability Actively Exploited in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco has disclosed a critical authentication bypass vulnerability in Cisco Catalyst SD-WAN Manager that attackers are actively exploiting. The flaw, tracked as CVE-2026-76504, could allow an unauthenticated remote attacker to gain administrative access to vulnerable SD-WAN management systems. The vulnerability …

Internet Society Launches Global Online Trust and Safety Hub as Part of Its Safer Internet Initiative

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Washignton, DC, USA, September 30th, 2026, CyberNewswire The Internet Society today launched the Online Trust and Safety Hub, a free global resource center in multiple languages, offering practical tools to help people stay safer and more confident online.  The Hub …

CopyEscape Docker Flaw Lets Malicious Containers Overwrite Host Files and Gain Root Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Docker flaw, CVE-2026-17106 (dubbed CopyEscape), lets malicious containers write files outside the docker cp destination, potentially enabling code execution and root-level compromise. The issue affects Docker’s archive extraction handling in moby/go-archive. When users copy files from a container to …

Cloudflare Builds Post-Quantum CA With Merkle Tree Certificates for Faster Quantum-Safe TLS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cloudflare is building a certificate authority to make post-quantum website authentication practical without burdening TLS connections with oversized signatures. The company plans to issue conventional certificates alongside Merkle Tree Certificates, or MTCs, and is targeting early 2027 for admission to …

Google Releases Chrome Update With 32 Security Fixes for Windows, Mac and Linux

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released a Chrome Stable update fixing 32 security vulnerabilities across Windows, macOS, and Linux, including one critical and multiple high-severity flaws in V8, ANGLE, GPU, WebGPU, Bluetooth, Passwords, and UI components. Chrome version 154.0.8037.92/.93 is being rolled out to …

Google Warns of Hackers Actively Exploiting Citrix 0-Day Vulnerabilities to Deploy Web Shells

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has warned that threat actors are actively exploiting two critical Citrix NetScaler zero-day vulnerabilities to gain root access, install stealthy web shells, and move into victim networks. The activity has affected organizations in North America and Europe, including government, …