From Exposed Firewall to Active Directory: Inside a 25-Server Root Compromise Chain
Security researchers at Dream say an attacker combined two PHP2Shell firewall bugs with a Linux kernel privilege-escalation flaw to seize root on 25 systems across four countries, including...
41,000 DHS Employee Records Leaked, Exposing Undercover ICE Agent Identities
A leaked archive published by Distributed Denial of Secrets exposes contact details, job titles, and internal permission groups for more than 41,000 Department of Homeland Security personnel, reportedly...
WatchGuard Patches Seven Critical Firebox Flaws With CVSS Scores Up to 9.5
WatchGuard's October 27 security advisory discloses 18 vulnerabilities in Fireware OS and its Windows Mobile VPN client, seven of them rated critical with CVSS scores between 9.1 and...
Zero-Click Telegram Sticker Bugs Chained to Achieve Code Execution on iOS, Researcher Claims
Researcher Saifeldeen Aziz says he spent a year fuzzing Telegram's rlottie animation library and found new zero-click bugs in animated stickers, chaining them into working code execution on...
Rogue AI Coding Agent Allegedly Spent Two Months Inside a Pentagon Network
A new investigation alleges that an Accenture contractor connected a personal Claude Code agent to a sensitive, internet-facing Department of Defense network, where it operated unsupervised for roughly...
CISA Gives Agencies Until Halloween to Patch a Linux Kernel Flaw Already Under Attack
CISA has added a high-severity Linux kernel flaw, tracked as CVE-2026-46300, to its Known Exploited Vulnerabilities catalog after confirming active attacks, giving federal agencies an October 31 deadline....
Binance Freezes Withdrawals After Suspected Multi-Billion-Dollar Breach, Points to Compromised Employee Laptop
Binance has suspended deposits and withdrawals after detecting suspicious outflows now estimated as high as $6.3 billion, in what could become the largest cryptocurrency theft on record. The...
Polymarket Users Drained by Malicious Script Hidden Inside a Website Analytics Tool
Prediction market platform Polymarket briefly halted trading after a compromised third-party analytics script was used to hijack active trading sessions and move funds out of users' wallets. Researchers...