2+ week, 2+ day ago   (243+ words) According to reports, Point72 Asset Management informed investors on August 5 that it had been targeted in the latest cyberattack on Wall Street. Bloomberg first reported the communication, citing a source familiar with the matter. The firm said it was reviewing the…...

4+ week, 2+ day ago   (569+ words) A Zimbra phishing campaign attributed to Russian state-supported cyber actors has targeted Western government and commercial organizations, exploiting CVE-2025-66376 to access sensitive email data and other information, according to a joint cybersecurity advisory issued in July 2026. Unlike conventional phishing attacks…...

1+ mon, 2+ week ago   (265+ words) The Cyber Express The CERT Coordination Center (CERT/CC) has disclosed a critical security issue affecting multiple Tenda networking devices Tracked as CVE-2026-11405, the vulnerability stems from an undocumented backdoor in Tenda firmware that allows unauthenticated attackers to gain administrative access…...

2+ mon, 4+ day ago   (351+ words) Security researchers and software vendors warn that attackers are actively exploiting vulnerabilities in both Joomla and the LiteSpeed cPanel plugin, posing significant risks to website administrators and shared hosting environments. One of the most urgent issues is CVE-2026-48907, a critical…...

2+ mon, 4+ day ago   (324+ words) The Cyber Express This week’s weekly roundup of cybersecurity developments highlights an expanding intersection of cyber risk, regulatory action, and enterprise vulnerability Across healthcare, technology platforms, gaming companies, and government policy, organizations continue to confront a rapidly evolving cybersecurity…...

2+ mon, 4+ day ago   (426+ words) Nintendo of America has confirmed that employee survey data was exposed in the recent TinyPulse cyberattack, although the company emphasized that its own systems were not breached and that no customer or financial information was accessed. The disclosure follows claims…...

2+ mon, 1+ week ago   (234+ words) According to a security advisory issued by Splunk, the flaw exists in Splunk Enterprise versions below 10.2.4 and 10.0.7. The company explained the issue in the following statement: “In Splunk Enterprise versions below 10.2.4 and 10.0.7, an unauthenticated user could create or truncate arbitrary…...

2+ mon, 4+ week ago   (422+ words) The exploited flaw, tracked as CVE-2026-26980, was disclosed and patched in February 2026 in version 6.19.1 of the Ghost content management system. Ghost is a widely used open-source CMS focused on blogging, digital publishing, newsletters, and memberships. According to its developers, the…...

3+ mon, 2+ day ago   (202+ words) A critical local privilege escalation vulnerability chain tracked as CVE-2026–5140 has exposed serious security weaknesses in Pardus Linux. Researchers revealed that the flaws allow any unprivileged local user to gain full root access without authentication, potentially leading to complete system…...

3+ mon, 4+ day ago   (292+ words) NGINX is one of the most widely used web servers in the world and serves as a foundational component of modern internet infrastructure. In addition to functioning as a web server, it is commonly deployed as a load balancer, reverse…...