Latest IntelligencePage 7
Search by keyword →
Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released
A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution — but only against appli...
Roundcube Webmail Patches 12 Security Flaws, Including Zero-Click XSS and SSRF Bypass
Roundcube Webmail has released security updates for its 1.6 LTS and 1.7 branches, fixing 12 vulnerabilities that could expose users and servers to cross-site sc...
Fake Minecraft Mod Deploys Myth Stealer RAT to Steal Browser Credentials and Cookies
A counterfeit Minecraft optimisation mod is installing Myth Stealer, malware that can steal browser passwords, cookies and data. Its malicious file looks useful...
ChatGPT can now connect to your personal apps to mimic writing style
OpenAI appears to be testing a new "Writing Style" feature for ChatGPT that can learn how you write by looking at examples from your connected apps. [...]...
Hackers exploit new MikroTik RouterOS flaws to hijack routers
Hackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH services exposed to the interne...
ConnectWise warns of new ScreenConnect flaw without patch
ConnectWise has shared temporary mitigation measures for a new ScreenConnect Remote Access vulnerability that it plans to patch later this week. [...]...
Telerik Flaw Chain Lets Unauthenticated Attackers Turn Padding Oracle Into Remote Code Execution
Security researchers have uncovered a significant vulnerability chain in Telerik UI for ASP.NET AJAX, allowing unauthenticated attackers to execute remote code ...
OpenVPN Fixes 7 Security Flaws Affecting VPN Connections and Windows Systems
The OpenVPN project has shipped version 2.7.7, a security-focused release that patches seven distinct vulnerabilities spanning the software’s core reliabi...
Malicious Chrome Extension Can Steal Login Sessions and Turn PCs Into Remote Backdoors
PEEP, a malicious Chrome extension posing as Smart Bookmarks, can steal active login sessions and turn an already compromised Windows computer into a remote bac...
N-able Released Hotfix for RCE Vulnerability Affecting Platform
N-able has released N-central 2026.3 Hotfix 4 to fix CVE-2026-86218. This critical vulnerability could allow an unauthenticated attacker to execute code remotel...
N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw
Every on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4. N-able's incident notice says the fl...
Critical Software Vulnerabilities Surge From Under 100 to More Than 600 a Month
The cybersecurity industry is confronting a threat landscape that is changing faster than most defenders can keep track of. New data from Epoch AI shows that cr...
Top 10 Best Endpoint Detection & Response (EDR) Solutions in 2026
Endpoint detection and response (EDR) records what happens on your endpoints, detects attacker behaviour that prevention missed, and gives you the ability to in...
MikroTik RouterOS bugs actively exploited in device takeover attacks
CERT Polska is warning MikroTik customers to urgently update RouterOS after confirming that attackers are exploiting two critical SSH vulnerabilities to gain fu...
Top 10 Best Antivirus Software for Mac in 2026
Macs get malware. Not as much as Windows, but the volume of macOS infostealers harvesting browser credentials, crypto wallets, and keychain data has grown sharp...
Top 10 Best Antivirus (Endpoint Protection) Software for Business in 2026
Business antivirus has become endpoint security: prevention, detection, and response in one agent rather than signature scanning alone. CrowdStrike leads on det...
Top 10 Best Managed Firewall Services in 2026
Palo Alto Networks scores highest in our 2026 evaluation of managed firewall service, with Fortinet close behind on breadth and value and Cato Networks leading ...
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-inter...
Russian Hackers Use New HOOKEDGE Backdoor to Spy on European Organizations
Russian hackers have used a Windows backdoor called HOOKEDGE in espionage operations against diplomatic, government, and defense-related organizations across Eu...
OpenAI Confirms ‘wiki Hijack,’ and Says It’s Working on a Framework for Disclosure Details
OpenAI has confirmed that its AI agents wrote to several internet sites during what it calls the “wiki incident,” also described online as the “wiki hijack.” Th...