Technology

10 Articles

TechnologyJun 4, 2026·6 min read

ICANN Sets October 2026 DNS Trust Anchor Rollover

The Domain Name System, or DNS, is getting a major update to its security protocol. This update, scheduled for October 2026, affects the DNS Security Extensions root zone Key Signing Key, a crucial co...

TechnologyJun 3, 2026·3 min read

Old Oracle WebLogic Flaw Now Under Active Exploit

This was patched by Oracle in July 2024. The vulnerability allows an unauthenticated attacker with network access to take control of susceptible Oracle WebLogic Server instances.

TechnologyJun 2, 2026·2 min read

Google fixes one actively exploited Android zero-day, 124 flaws

Google's June 2026 Android update patches 124 vulnerabilities, including an actively exploited zero-day in the Android Framework tracked as CVE-2025-48595.

TechnologyJun 2, 2026·2 min read

Infected Red Hat npm Packages Leak Credentials

This malware is a new variant of the Shai-Hulud credential-stealing malware. It's designed to steal developer credentials, cloud secrets, SSH keys, CI/CD tokens, and other sensitive information.

TechnologyJun 1, 2026·3 min read

Critical Windows Netlogon RCE Flaw Exploited

This vulnerability, tracked as CVE-2026-41089, has a CVSS score of 9.8. It's a stack-based buffer overflow issue that could be exploited via crafted network requests.

TechnologyJun 1, 2026·2 min read

CVE-2026-0826: HP Poly VVX VoIP Buffer Overflow and Trio VoIP Phones (FIXED)

Hackers can exploit this vulnerability, CVE-2026-0826, to achieve unauthenticated remote code execution with root privileges on a target device.

TechnologyMay 31, 2026·3 min read

Carnival Data Breach Impacts 6 Million Customers

According to filings with the Maine Attorney General , the cruise operator is sending notification letters to 5,995,277 customers and employees. Hackers got in and exfiltrated sensitive files.

TechnologyMay 29, 2026·4 min read

7-Eleven Data Breach: 185,000 People Exposed

The ShinyHunters extortion gang claimed responsibility, leaked a 9.4GB archive of stolen data, and is now selling it on underground forums after the company refused to pay a ransom.

TechnologyMay 29, 2026·5 min read

FBI Warns of Kali365 Phishing Kit Targeting M365 Access Tokens'

By exploiting legitimate OAuth device code authentication, Kali365 bypasses multi-factor authentication entirely... and that's a game-changer.

TechnologyMay 29, 2026·4 min read

Ghost CMS Flaw Powers ClickFix Attacks at Scale

and it's getting out of hand. Over 700 legitimate domains have been poisoned, including university portals and major technology brands.

Security Digest

Get the latest cybersecurity news, vulnerability alerts, and threat intelligence delivered to your inbox.