Critical Cloudflare Zero-Day Vulnerability in ACME Challenge Handling Enables Complete WAF Bypass and Unauthorized Origin Host Access
A critical zero-day vulnerability in Cloudflare’s Web Application Firewall (WAF) was discovered that allowed attackers to bypass…
continue reading..
CVE-2026-23722: Critical Reflected XSS Enables Silent Browser-Side Takeover in WeGIA
Executive Summary CVE-2026-23722 is a critical reflected XSS vulnerability in the WeGIA web application.The issue occurs because…
continue reading..
CVE-2012-10064: Legacy WordPress Plugin Bug Enabling Silent Remote Code Execution
Vulnerability Overview CVE ID: CVE-2012-10064Affected Component: Omni Secure Files WordPress PluginAffected Versions: ≤ 0.1.13Attack Type: Remote, UnauthenticatedImpact:…
continue reading..
Critical Stored XSS Vulnerability (CVE-2026-1181) Discovered in Altium Forum, Exposing Users to Account Takeover and Data Theft
CVE-2026-1181 is a stored (persistent) cross-site scripting vulnerability affecting the Altium Forum platform. The issue exists due…
continue reading..
SolyxImmortal: The Silent Stealer Hijacking Credentials, Sessions, and Screens in Plain Sight
SolyxImmortal Stealer Disclosure timeframe: January 2026Malware type: Information-stealing malware (credential and session hijacking) Executive Summary SolyxImmortal is…
continue reading..
Inside the Ingram Micro Ransomware Breach: How a Silent Intrusion Exposed 42,000 Employee Records
Incident Overview Ingram Micro, one of the world’s largest IT distributors, experienced a ransomware incident that resulted…
continue reading..
Critical Livewire Filemanager File Upload Flaw Exposes Servers to Remote Code Execution (CVE-2025-14894)
CVE-2025-14894 is a security vulnerability affecting Livewire Filemanager, a Laravel-based file management component commonly integrated into admin…
continue reading..
CIRO Confirms Major Data Breach Affecting 750,000 Canadian Investors
The Canadian Investment Regulatory Organization (CIRO) has confirmed that a data breach exposed the personal information of…
continue reading..
StackWarp Flaw Exposes Critical Weakness in AMD SEV-SNP, Impacting Zen 1–5 CPUs
StackWarp is the name given to a newly disclosed hardware vulnerability affecting a wide range of modern…
continue reading..
