The problem with set-and-forget devices is that you can set them up and then forget about them. This is good in terms of remembering it, but people sometimes forget that their device needs regular updates to stay secure. That’s what’s happening with Plex as hackers distribute Plex2Shell to devices that haven’t been updated since August. … Read more
A proxyjacking campaign impacted devices in 34 countries and monetized victims’ Internet connections through a commercial residential proxy network. The operator installed Pawns.app, a legitimate bandwidth sharing application that allows users to earn money by sharing their Internet connections across devices without the owners’ consent. Pawns.app account holders are rewarded for allowing other users’ traffic … Read more
Hackers are exploiting an operating system command entry vulnerability in SiteGuard Server Edition’s web application firewall (WAF), which allows them to execute commands with ROOT or SYSTEM privileges on affected computers. The security issue is tracked as CVE-2026-106931 and affects the statistics feature in host-based WAF instances, which is enabled by default. SiteGuard is a … Read more
ConnectWise has suspended customer access to its cloud backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. Reports of the malicious activity first surfaced on Friday, with administrators observing unauthorized access to customer data in Microsoft 365 tenants due to a possible “SkyKick/CW breach.” Later the same day, … Read more
Researchers warn that hackers could soon exploit a maximum severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce that could potentially allow them to execute arbitrary PHP code on store servers. According to e-commerce security firm Sansec, no attacks exploiting the vulnerability called BlockStrap have been observed so far, but threat actors are expected to find … Read more
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online – Built-in CODE Server app (richdocumentscode) for Nextcloud. Multiple administrator reports indicate that the attacks began in mid-September, about a month before the official event Security bulletinThe GitHub AdviceAnd CVE publication. CVE-2026-110447 affects Richdocumentscode versions before 26.4.303 and … Read more
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution via specially crafted PDF files. The flaw was discovered on August 23 by researchers at Defiant platform Wordfence using their AI-powered system Argus. Ghostscript is a PostScript and PDF interpreter that can render PDFs as images, … Read more
Meta is notifying around 1,500 people, most of them employees in the US, that their personal data was compromised after hackers broke into some of the company’s GitHub repositories. The break-in was discovered a few weeks ago. According to the tech giant, an outside group gained access to the repositories using an employee’s stolen credentials. … Read more
Canadian cybersecurity executive Edward Dubrovsky was arrested in Pennsylvania in connection with alleged extortion activities that multiple reports have linked to the FBI’s ongoing crackdown on the ShinyHunters hacking group. Dubrovsky, 54, has held senior positions at cybersecurity firms that help victims of data breaches and ransomware negotiate extortion payments with cybercriminals. Yesterday, FBI Director … Read more
Hackers abuse legitimate Bing search result redirects as click-through URLs in Google Search Ads to direct users to fake Claude installers that carry out ClickFix attacks. The technique, dubbed “Adception” by security researchers at Push Security, appears designed to bypass advertising security checks by using Bing’s trusted domain as an advertising target before redirecting victims … Read more