SharePoint Code-Injection Bug Joins CISA’s Must-Patch List After Real-World Attacks
CISA has added a Microsoft SharePoint code-injection flaw, CVE-2026-65660, to its Known Exploited Vulnerabilities catalog after confirming it is being used in live attacks. The agency gave federal...
ShinyHunters Evades WAF Rules to Reopen Critical PeopleSoft Attack Path
ShinyHunters has resumed mass exploitation of a critical Oracle PeopleSoft flaw by encoding part of the attack path to slip past some WAF rules. Compromised servers received web...
OpenCode Web Interface Flaw Let Hostile Sites Run Commands on Developer PCs
A flaw in OpenCode’s local web interface allowed a malicious website to turn an upgrade request into code execution on a developer machine. Version 1.18.22 fixes both the...
NeedyMantis Malware Gives Espionage Operators a Modular Foothold in Sensitive Networks
Microsoft has detailed NeedyMantis, a modular implant used after attackers gain access to selected organizations. Its covert loading chain, encrypted communications and downloadable modules make it a durable...
Pentagon Personnel System Breach Exposes Data on More Than 3 Million People
A breach of a Defense Manpower Data Center system exposed sensitive information tied to more than three million living and deceased people. The long intrusion window and the...
F-Droid 2.0 Modernizes Android App Discovery but Leaves Some Privacy Tools Behind
F-Droid 2.0 brings the open-source Android repository its largest client redesign in a decade, with improved search, automatic updates and a modernized codebase. Privacy-conscious users should note that...
Uncensored Local AI Reworks Credential Dumper to Evade Two EDR Platforms
A controlled experiment showed a locally hosted, guardrail-free AI model modifying an LSASS credential dumper until it escaped detection by two unnamed EDR products. The limited test does...
Two Reported NetScaler Zero-Days Put Internet-Facing Gateways on Emergency Watch
Researchers say two undisclosed Citrix NetScaler remote-code-execution flaws are already being used in attacks, although vendor confirmation and technical indicators remain pending. Defenders should inventory exposed appliances, preserve...