Škoda Security Incident Exposes Customers Data From Online Shop

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 8, 2026 Škoda Auto has disclosed a significant IT security incident affecting its official online shop, revealing that unauthorized individuals exploited a vulnerability in the platform’s standard shop software …

Hackers Use Fake OpenClaw Installer to Steal Crypto Wallet and Password Manager Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 8, 2026 A dangerous new infostealer campaign is targeting some of the most sensitive data people store on their computers. Disguised as a legitimate installer for OpenClaw, a popular …

Critical Spring Vulnerabilities Expose Arbitrary Files and GCP Secrets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 8, 2026 Spring Cloud Config provides crucial server-side and client-side support for externalized configuration in distributed systems. Recently, the Spring development team disclosed four security vulnerabilities impacting the Spring …

Dirty Frag Linux Vulnerability Let Attackers Gain Root Privileges – PoC Released

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 8, 2026 Dirty Frag is a newly disclosed, CVE-pending Linux kernel local privilege escalation (LPE) vulnerability that chains two separate page-cache write flaws, the xfrm-ESP Page-Cache Write and the RxRPC …

Dirty Frag Linux Vulnerability Let Attackers Gain Root Privileges – PoC Released

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 8, 2026 Dirty Frag is a newly disclosed, CVE-pending Linux kernel local privilege escalation (LPE) vulnerability that chains two separate page-cache write flaws, the xfrm-ESP Page-Cache Write and the RxRPC …

Multiple Critical Vulnerabilities Patched in Next.js and React Server Components

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 8, 2026 Vercel has released an extensive set of security advisories for Next.js, addressing more than a dozen vulnerabilities, including denial-of-service, middleware bypass, server-side request forgery, and cross-site scripting. …

Canvas Breach Disrupts Schools & Colleges Nationwide

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

An ongoing data extortion attack targeting the widely-used education technology platform Canvas disrupted classes and coursework at school districts and universities across the United States today, after a cybercrime group …