Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks · 3h NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks · 6h Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing · 7h Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules · 7h Vulnerability in Sparx Systems Enterprise Architect software · 7h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 8h Vulnerabilities in Slican telephone exchanges · 8h Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls · 12h Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway · 12h Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts · 12h Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks · 3h NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks · 6h Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing · 7h Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules · 7h Vulnerability in Sparx Systems Enterprise Architect software · 7h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 8h Vulnerabilities in Slican telephone exchanges · 8h Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls · 12h Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway · 12h Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts · 12h
🛡️
ACyber Sentinel Security Assessment Team
🇬🇧 English 🇮🇷 فارسی 🇸🇦 العربية 🇷🇺 Русский 🇨🇳 中文 🏛️ Latina
Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks ⚡ Breaking

Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks

The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through Au...

📰 The Hacker News 🕐 3h ⏱ 4 min read
NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

The Hacker News · 6h
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

The Hacker News · 7h
Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules

Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules

The Hacker News · 7h

Latest Intelligence — Page 22 of 24

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables authenticated remote code exe...

📰 The Hacker News 🕐 Sep 22
Slechts één van 225 aan Anthropic gelinkte kwetsbaarheden actief misbruikt

Slechts één van 225 aan Anthropic gelinkte kwetsbaarheden actief misbruikt

Van de 225 kwetsbaarheden die zijn ontdekt door onderzoekers van Anthropic en deelnemers aan Project Glasswing, wordt voor zover bekend slechts één actief misbr...

📰 security.nl 🕐 Sep 22
CISA meldt actief misbruik van stackoverflow in Zyxel switch

CISA meldt actief misbruik van stackoverflow in Zyxel switch

Het Cybersecurity and Infrastructure Security Agency (CISA) waarschuwt voor actief misbruik van een kritieke kwetsbaarheid in Zyxel switches. De kwetsbaarheid (...

📰 security.nl 🕐 Sep 22
WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session

WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session

A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a logged-in administrator later opened that p...

📰 The Hacker News 🕐 Sep 22
Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched security flaw impacting Zyxel GS1900 series switches to its Known...

📰 The Hacker News 🕐 Sep 22
ShinyHunters Hacked Clop. Now What About Clop's Victims?

ShinyHunters Hacked Clop. Now What About Clop's Victims?

4 Min ReadSource: winhorse via Getty ImagesShinyHunters apparently breached rival ransomware gang Clop last week, and the incident could pose additional risks t...

📰 Dark Reading 🕐 Sep 21
Weekly ALL-SOURCE Cyber Warfare Intelligence Brief 9.21.26

Weekly ALL-SOURCE Cyber Warfare Intelligence Brief 9.21.26

Reporting period: September 14–21, 2026Assessment cutoff: September 21, 2026Scope: State and state-aligned cyber operations, APT campaigns, technical intelligen...

📰 Krypt3ia 🕐 Sep 21
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things people already...

📰 The Hacker News 🕐 Sep 21
CISA meldt actief misbruik van drie kwetsbaarheden in Linux kernel

CISA meldt actief misbruik van drie kwetsbaarheden in Linux kernel

Het Cybersecurity and Infrastructure Security Agency (CISA) waarschuwt voor actief misbruik van drie kwetsbaarheden in de Linux-kernel. Het gaat om CVE-2025-396...

📰 security.nl 🕐 Sep 21