CERT-In Orders 12-Hour Critical Patch Windows for Internet-Facing Systems
India's cybersecurity agency cites AI-assisted attack automation as driver for accelerated patching requirements.
Category: Vulnerabilities
Weekly Security Summary Highlights Linux Vulnerabilities and Defender Zero-Days
Security roundup covers development tool compromise, legacy system vulnerabilities, and evolving phishing tactics
Ghost CMS SQL Injection Vulnerability Exploited to Hijack 700+ Websites
Attackers are exploiting CVE-2026-26980 to inject malicious JavaScript code for ClickFix campaigns targeting website visitors.
Chinese Webworm Group Uses Discord and MS Graph for New Backdoors
Researchers identify fresh 2025 activity from China-aligned threat actor deploying EchoCreep and GraphWorm backdoors through…
Security Bulletin Highlights Trust-Based Attack Trends
Weekly threat intelligence report identifies pattern of attackers exploiting trusted infrastructure and legitimate tools.
LiteSpeed cPanel Plugin Vulnerability Being Exploited for Root Access
CVE-2026-48172 allows attackers to execute arbitrary scripts with elevated permissions on affected systems.
CISA Adds Drupal Core SQL Injection Flaw to KEV
Critical vulnerability CVE-2026-9082 affecting all supported Drupal versions is being actively exploited in the wild.
Microsoft Defender vulnerabilities actively exploited in wild attacks
Two flaws in Microsoft Defender allow privilege escalation and denial-of-service, with active exploitation confirmed.
Trapdoor Android Ad Fraud Operation Compromised 455 Apps
HUMAN researchers uncovered a multi-stage fraud scheme targeting Android users through malicious apps and command-and-control…
Ivanti, Fortinet, SAP, VMware Patch Critical Vulnerabilities
Multiple vendors release fixes for remote code execution, SQL injection and privilege escalation flaws.