Old Synology NAS Flaws Resurface as C3RB3R Ransomware Locks Up Home and Business Storage
Security researchers say a ransomware strain tracked as C3RB3R is encrypting files on Synology network storage devices by exploiting vulnerabilities the vendor patched back in 2024. Synology is...
From Exposed Firewall to Active Directory: Inside a 25-Server Root Compromise Chain
Security researchers at Dream say an attacker combined two PHP2Shell firewall bugs with a Linux kernel privilege-escalation flaw to seize root on 25 systems across four countries, including...
Attackers Are Actively Hijacking Unpatched Citrix NetScaler Appliances to Plant Web Shells
Security researchers have documented a live exploitation campaign against a critical, already-disclosed Citrix NetScaler flaw, using a clever log-poisoning technique to achieve remote code execution, install web shells,...
Actively Exploited Collabora RCE Leaves Nextcloud Servers Backdoored
Attackers are exploiting CVE-2026-110447, a critical unauthenticated command-injection flaw in the Collabora Online Built-in CODE Server app for Nextcloud. Administrators must upgrade to richdocumentscode 26.4.303 or later and...
Plex2Shell Attacks Turn Exposed Media Servers Into Cryptomining Nodes
Attackers are using the public Plex2Shell exploit chain against internet-facing Plex Media Server instances to install an XMRig miner and proxy software. Administrators should update immediately and inspect...
Palo Alto PAN-OS Zero-Day Exploited to Run Code as Root
Palo Alto Networks says attackers have begun exploiting CVE-2026-0322, a PAN-OS management-interface flaw that enables root-level code execution. Administrators should install a fixed release immediately and investigate access...
Cisco Email Gateway Zero-Day Gives Attackers Root Access
Cisco has confirmed active exploitation of CVE-2026-76519, a critical Secure Email Gateway flaw triggered by crafted attachments. A corrected Content Scanner Tools package is available, but organizations must...
Actively Exploited FortiMail Zero-Day Lets Attackers Write Files Without Login
Fortinet says attackers are exploiting a critical FortiMail flaw that permits unauthenticated file writes through crafted web requests. With patches still pending for several branches at disclosure, administrators...