CVE-2026-21440: Arbitrary File Write via Multipart Path Traversal in adonisjs/bodyparser CyberSecurity News CyberDefenderJanuary 6, 2026January 6, 20263 mins0 Field Details CVE ID CVE-2026-21440 Vulnerability Type Path Traversal (CWE-22) Affected Component @adonisjs/bodyparser Attack Vector Remote (via…continue reading..
CVE-2025-68668 n8n CVSS 9.9 Flaw Enables Authenticated Remote Command Execution CyberSecurity News CyberDefenderJanuary 6, 2026January 6, 20266 mins0 CVE-2025-68668, a critical security vulnerability has been disclosed in n8n, a popular open-source workflow automation platform. The…continue reading..
A 20% Surge in CISA’s KEV Catalog Signals Escalating Ransomware Threats in 2025 CyberSecurity News CyberDefenderJanuary 6, 2026January 6, 20268 mins0 In 2025, the cybersecurity landscape witnessed a noticeable acceleration in the number of exploited software and hardware…continue reading..
ClickFix attack involving fake Windows BSOD/Update screens CyberSecurity News CyberDefenderJanuary 6, 2026January 6, 20263 mins0 This Latest Variant: Fake Windows BSOD/Update How It Actually Infects You Why This Is Dangerous How to…continue reading..
Storm-0249 Kill Chain: Practical Detections Before Ransomware Cyber Kill Chain CyberDefenderJanuary 6, 2026January 6, 202611 mins0 Storm-0249 is a precision access broker that weaponizes trust — abusing signed binaries, EDR processes, PowerShell, and…continue reading..
Brightspeed Cybersecurity Investigation CyberSecurity News CyberDefenderJanuary 6, 2026January 6, 20268 mins0 Brightspeed, one of the United States’ largest fiber broadband providers, is scrambling to assess and respond to…continue reading..
Major Customer Data Exposure Hits Ledger Through Third-Party Partner CyberSecurity News CyberDefenderJanuary 6, 2026January 6, 20267 mins0 Crypto hardware wallet leader Ledger has confirmed that some customer personal data was exposed after a cybersecurity…continue reading..
GravityRAT: A Cross-Platform Espionage Framework Targeting Windows, Android, and macOS Cyber Kill Chain CyberDefenderJanuary 6, 2026January 6, 20266 mins0 GravityRAT with Remote Access Capabilities Attacking Windows, Android, and macOS Systems is a headline referring to a…continue reading..
WhatsApp’s Silent Mitigation of Cross-Platform Device Fingerprinting CyberSecurity News CyberDefenderJanuary 6, 2026January 6, 20266 mins0 A recently observed, undocumented change in WhatsApp modifies the generation strategy of Signal Protocol pre-key identifiers on…continue reading..
Unpatched FortiWeb WAFs Abused as Persistent Sliver C2 Infrastructure CyberSecurity News CyberDefenderJanuary 6, 2026January 6, 20265 mins0 A newly uncovered cybersecurity campaign has revealed a sophisticated threat actor exploiting outdated Fortinet FortiWeb web application…continue reading..
