May 14, 2026 A newly disclosed vulnerability in the Microsoft Windows DNS Client could let attackers silently execute malicious code across enterprise networks, exposing a massive attack surface. Officially designated …
Critical 18-Year-Old NGINX Vulnerability Enables Remote Code Execution Attacks
May 14, 2026 A critical heap buffer overflow vulnerability has been discovered in the source code of NGINX, present since 2008. This vulnerability has been publicly disclosed, along with a …
Critical MongoDB Vulnerability Allow Attackers to Execute Arbitrary Code
May 14, 2026 A newly disclosed critical vulnerability in MongoDB could allow threat actors to execute arbitrary code, potentially handing them complete control over affected servers and exposing millions of …
The Gentlemen RaaS Leverages Fortinet and Cisco Edge Devices for Initial Access
May 14, 2026 A ransomware group that only surfaced in mid-2025 has already made a significant mark on the threat landscape. The Gentlemen, a ransomware-as-a-service (RaaS) operation, has quickly risen …
Windows BitLocker 0-Day Vulnerability Enables Access to Encrypted Drives
May 14, 2026 Two new unpatched Windows BitLocker zero-day vulnerabilities significantly compromise Microsoft’s ecosystem. The exploits include a critical BitLocker encryption bypass called YellowKey and a privilege escalation flaw named …
How Top SOCs and MSSPs Prevent Phishing Incidents Missed by Email Filters
May 13, 2026 Prevent Phishing Incidents Missed by Email Filters Email filters are important, but they can’t remove phishing risk on their own. Today’s campaigns are built to slip through the cracks, using …
Foxconn Confirms Cyberattack After Nitrogen Ransomware Gang Claim
May 13, 2026 Foxconn has officially confirmed a cyberattack targeting its North American operations after the Nitrogen ransomware gang publicly listed the company on its data leak site, claiming to …
Fragnesia Linux Vulnerability Let Attackers Gain Root Privileges – PoC Released
May 13, 2026 A newly disclosed Linux kernel vulnerability dubbed Fragnesia allows any local unprivileged user to escalate privileges to root without requiring a race condition, making it one of …
ClickFix Evolves with 10-Year-Old Open-Source Python SOCKS5 Proxy
May 13, 2026 A cyberattack campaign that tricks users into running malicious commands on their own computers has taken a dangerous new turn. The technique, known as “ClickFix,” has been …
Critical SandboxJS Escape Vulnerability Enables Host Takeover
May 13, 2026 A critical security flaw has been found in SandboxJS, a widely used JavaScript sandboxing library available on npm. The vulnerability allows attackers to break out of the …