CVE-2026-21452: MessagePack for Java EXT32 Deserialization Allows Remote Heap Exhaustion Vulnerabilities AegironJanuary 3, 2026January 3, 20269 mins0 CVE Identifier: CVE-2026-21452 Vulnerability Title: Unbounded Heap Allocation During EXT32 Deserialization in MessagePack for Java Affected Software:…continue reading..
Infostealers: The Malware That Turns Trust Into a Weapon CyberSecurity News CyberDefenderJanuary 3, 2026January 3, 20266 mins0 Infostealer malware has become a pivotal enabler for modern cybercrime. Beyond stealing passwords and cookies, these tools…continue reading..
Critical Bagisto Security Flaws Expose Full System Takeover and Remote Code Execution (CVE-2026-21446, CVE-2026-21448) Vulnerabilities AegironJanuary 3, 2026January 3, 20267 mins0 CVE-2026-21446 – Bagisto Installer API Authentication Bypass Product: BagistoAffected Versions: 2.3.0 – 2.3.9Fixed Version: 2.3.10 Severity Exploitability…continue reading..
CVE-2026-21445: Critical Langflow API Exposure Allows Unauthenticated Access to Conversations, Transactions, and Data Deletion Vulnerabilities AegironJanuary 3, 2026January 3, 20269 mins0 CVE ID: CVE-2026-21445Product: LangflowVulnerability Type: Missing Authentication / Broken Access ControlAffected Versions: All versions prior to 1.7.0.dev45Fixed…continue reading..
VVS Stealer: The “Invisible” Python Malware Quietly Hijacking Discord Accounts Cyber Threat Intelligence AegironJanuary 3, 2026January 3, 20268 mins0 In early January 2026, security researchers identified an actively distributed Python-based information stealer known as VVS Stealer.…continue reading..
Multiple High-Risk Vulnerabilities in Emlog CMS Enable Account Takeover and Server-Side Attacks Vulnerabilities AegironJanuary 3, 2026January 3, 20268 mins0 Product Details Advisory Overview Multiple security vulnerabilities have been identified in Emlog, affecting versions up to 2.5.23.…continue reading..
TransUnion Faces Second Class Action Over 4.4M-Person Data Breach CyberSecurity News CyberDefenderJanuary 3, 2026January 3, 20263 mins0 In the wake of a major data breach that exposed the personal information of approximately 4.4 million…continue reading..
Romania’s Largest Coal Power Producer Crippled by Ransomware Attack CyberSecurity News AegironJanuary 3, 2026January 3, 20267 mins0 Ransomware Hits Romania’s Power Backbone: Inside the Cyberattack on Oltenia Energy Complex Attack date: December 26, 2025Public…continue reading..
Active Zero-Day Exploitation: React2Shell RCE Driving Large-Scale Linux Botnet Infection Cyber Threat Intelligence AegironJanuary 3, 2026January 3, 202616 mins0 Executive Summary On January 2, 2026, security researchers from CloudSEK and SecurityWeek publicly disclosed a critical zero-day…continue reading..
Daedong-USA (KIOTI Tractor Division) Responds to Cybersecurity Incident Affecting Corporate Systems CyberSecurity News CyberDefenderJanuary 3, 2026January 3, 20266 mins0 Daedong-USA, the U.S. subsidiary of Daedong Corporation and operator of the KIOTI Tractor Division, has confirmed that…continue reading..
