VulnerabilityThe Hacker NewsCVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private KeyA critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker…Read on The Hacker NewsVulnerabilityThe Hacker NewsAttackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active…Read on The Hacker NewsVulnerabilityDark ReadingL’Italia è afflitta da vulnerabilità informatiche, senza una causa chiaraI ricercatori non riescono a spiegare del tutto perché le minacce informatiche in Italia siano così diverse rispetto a quelle di qualsiasi altro Paese.Read on Dark ReadingVulnerabilityThe Hacker NewsTeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control ThemTeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the…Read on The Hacker NewsVulnerabilityThe Hacker NewsWordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursThreat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, which does not have a CVE…Read on The Hacker NewsVulnerabilitySecurityWeekFresh WordPress Vulnerability in Attackers’ CrosshairsThreat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution. The post Fresh WordPress Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek.Read on SecurityWeekVulnerabilityThe Hacker NewsHackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass FlawDrupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a…Read on The Hacker NewsVulnerabilityThe Hacker NewsLinux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other DistributionsA flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions. The kernel's own CVE team rates it…Read on The Hacker NewsVulnerabilityThe Hacker NewsGoogle's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching VulnerabilitiesGoogle on Wednesday took the wraps off Gemini 4 Carbon, its latest frontier model with state-of-the-art cybersecurity and long-horizon capabilities. "It shows significant gains across coding and agentic…Read on The Hacker NewsVulnerabilityThe Hacker NewsTelegram Android Flaw Lets Attackers Run Code When Users Answer Voice CallsA flaw in Telegram for Android could be chained with two other bugs to take full control of a victim's phone through a voice call, once the victim…Read on The Hacker NewsVulnerabilityDark ReadingCyber Vulnerabilities Besiege Italy, Absent Clear CauseResearchers can't quite explain why cyber threats look so different in Italy compared with everywhere else.Read on Dark Reading
Headlines link to the original publishers. Collected automatically and labelled by topic; INFO SHIELD is not responsible for third-party content.