CopyEscape Flaw Turns Docker File Copies Into a Route to Host Root
A flaw in Docker’s archive extraction path can let a hostile container write beyond the destination chosen for a file copy. On Linux systems where the command runs...
Citrix NetScaler Zero-Days Under Active Attack: Google Uncovers Hidden Web Shell Campaign
Google's threat intelligence team says attackers have been exploiting two critical, now-patched Citrix NetScaler zero-days since early September to plant a stealthy PHP web shell and pivot deep...
Google Patches 32 Chrome Flaws Including a Critical Memory-Corruption Bug — Update Now
Chrome's latest stable release closes 32 security holes across Windows, macOS, and Linux, including a critical ANGLE buffer overflow and several V8 engine flaws that could let a...
OpenSSL DTLS Flaw Can Expose Heap Memory and Crash Network Services
OpenSSL has patched a high-severity DTLS flaw that can disclose adjacent heap data in plaintext or crash an affected process. Organizations should locate both system and bundled OpenSSL...
Octopus Server Deserialization Bug Opens Deployment Systems to Code Execution
A high-severity Octopus Server vulnerability lets sufficiently privileged authenticated users execute code through malicious JSON. There is no workaround, making upgrades urgent for self-hosted deployment environments that hold...
OpenCode Web Interface Flaw Let Hostile Sites Run Commands on Developer PCs
A flaw in OpenCode’s local web interface allowed a malicious website to turn an upgrade request into code execution on a developer machine. Version 1.18.22 fixes both the...
SharePoint Code-Injection Bug Joins CISA’s Must-Patch List After Real-World Attacks
CISA has added a Microsoft SharePoint code-injection flaw, CVE-2026-65660, to its Known Exploited Vulnerabilities catalog after confirming it is being used in live attacks. The agency gave federal...
Two Reported NetScaler Zero-Days Put Internet-Facing Gateways on Emergency Watch
Researchers say two undisclosed Citrix NetScaler remote-code-execution flaws are already being used in attacks, although vendor confirmation and technical indicators remain pending. Defenders should inventory exposed appliances, preserve...