cyberintel.kalymoon.com · 39058 articles · updated every 4 hours · grows forever
Google probes exploitation of critical Windows service CVE Cybersecurity Dive
It’s nasty , but it requires physical access to the computer: The exploit, named YellowKey, was published earlier this week by a researcher who goes by the alias Nightmare-Eclipse. It reliably bypasse…
A vulnerability classified as critical was found in opensourcepos Open Source Point of Sale up to 3.4.2 . This issue affects the function getPicThumb of the file app/Controllers/Items.php . The manipu…
A vulnerability, which was classified as problematic , has been found in opensourcepos Open Source Point of Sale up to 3.4.2 . Impacted is the function Login of the file app/Models/Employee.php of the…
A vulnerability, which was classified as critical , was found in Feeds for YouTube Plugin up to 2.6.3 on WordPress. The affected element is the function actions of the component License Key Handler . …
A vulnerability has been found in WP Photo Album Plus Plugin 9.1.11.0 on WordPress and classified as critical . The impacted element is an unknown function. Performing a manipulation results in sql in…
A vulnerability was found in Ajax Load More Plugin up to 7.8.3 on WordPress and classified as problematic . This affects an unknown function. Executing a manipulation can lead to cross site scripting.…
A vulnerability was found in Autoptimize Plugin up to 3.1.14 on WordPress. It has been classified as problematic . This impacts an unknown function of the component Regular Expression Handler . The ma…
A vulnerability was found in WP Maps Plugin up to 4.9.2 on WordPress. It has been declared as critical . Affected is an unknown function. The manipulation results in path traversal. This vulnerability…
A critical vulnerability in a widely used WordPress plugin has exposed over 200,000 websites to full account takeover, raising urgent concerns across the security community. Discovered on May 8, 2026,…
A critical Windows privilege escalation zero-day vulnerability dubbed “MiniPlasma” has emerged with a public proof-of-concept exploit that allows attackers to achieve SYSTEM-level privileges on fully …
Microsoft has officially acknowledged a critical installation failure affecting its May 2026 Patch Tuesday cumulative update for Windows 11, KB5089549, leaving users stranded with error code 0x800f092…
Ransomware, supply chain vulnerabilities, insider threats, compliance failures, and software disruptions remain major concerns for security leaders, according to The Ransomware Reality: Zero Days to R…
McAfee + ChatGPT integration brings real-time scam detection in conversations and gives users an easier way to verify suspicious content before clicking or responding. It is available to anyone, witho…
Time has become organizations’ biggest vulnerability because the gap between vulnerability discovery and exploitation has narrowed to hours, according to Synack’s 2026 State of Vulnerabilities Report.…
Penetration testing has usually required weeks of manual work, specialized tooling, and teams with narrow skill sets. Lyrie, an open-source autonomous security agent built by OTT Cybersecurity, compre…
Enterprises deploying LLMs have spent the past two years building defenses around a reasonable assumption: malicious behavior leaves a trace in the input. Scan for suspicious tokens, filter unusual ch…
Participants demonstrated exploits for Windows, Linux, VMware, Nvidia, and AI products. The post Hackers Earn $1.3 Million at Pwn2Own Berlin 2026 appeared first on SecurityWeek .
The flaw leads to denial-of-service on default configurations and to remote code execution if ASLR is disabled. The post Exploitation of Critical NGINX Vulnerability Begins appeared first on SecurityW…
The Pwn2Own Berlin 2026 hacking contest has concluded, with security researchers collecting $1,298,250 in rewards after exploiting 47 zero-day flaws. [...]
A recently patched local privilege escalation vulnerability in the Linux kernel's rxgk module now has a proof-of-concept exploit that allows attackers to gain root access on some Linux systems. [...]
CSIS flags Iran's shift from episodic cyberattacks to sustained campaign against critical infrastructure Industrial Cyber