Handala Hack: Telegram Accounts of Israeli Officials Compromised Through Session Hijacking CyberSecurity News CyberDefenderJanuary 2, 2026January 2, 20266 mins0 In December 2025, the hacktivist group Handala claimed it had carried out a major cyber-espionage operation against…continue reading..
CVE-2026-21437: When Your Package Manager Becomes a Blind Spot Vulnerabilities AegironJanuary 2, 2026January 2, 202612 mins0 CVE: CVE-2026-21437Product: eopkg — Solus Linux package managerAffected Versions: versions prior to 4.4.0Patched Version: 4.4.0Severity (Vendor /…continue reading..
CVE-2025-69194: Critical Client-Side File Overwrite Flaw in GNU Wget2 Vulnerabilities AegironJanuary 2, 2026January 2, 20267 mins0 Executive Summary CVE-2025-69194 is a high-severity path traversal vulnerability in GNU Wget2 affecting Metalink (v3/v4) processing. The…continue reading..
TriZetto Data Breach and Lawsuits (2025–2026) CyberSecurity News CyberDefenderJanuary 2, 2026January 2, 20264 mins0 Data Exposed According to notices to affected parties and breach investigations, the compromised data likely included: Financial…continue reading..
Cognizant Faces Wave of U.S. Class-Action Lawsuits After TriZetto Data Breach CyberSecurity News CyberDefenderJanuary 2, 2026January 2, 20263 mins0 Cognizant Technology Solutions Corp — a major U.S.–listed IT services firm — is facing multiple class-action lawsuits…continue reading..
Signal K Server Security Advisory: Multiple Critical Vulnerabilities (Pre-2.19.0) Threat Advisories AegironJanuary 2, 2026January 2, 202610 mins0 Affected Product Signal K Server – Marine data server commonly used as a central hub on boats…continue reading..
CVE-2025-15420: Critical Unauthenticated SQL Injection in Yonyou KSOA Allows Full Database Compromise Threat Advisories AegironJanuary 2, 2026January 2, 20267 mins0 Vulnerability Overview Severity & Risk Rating This vulnerability is considered high risk due to ease of exploitation…continue reading..
CVE-2026-21428: A Silent Header Injection Flaw Turning Simple HTTP Requests into Full-Blown SSRF Attacks Threat Advisories AegironJanuary 2, 2026January 2, 20267 mins0 CVE ID: CVE-2026-21428Affected Component: cpp-httplib (C++11 header-only HTTP/HTTPS library)Affected Versions: < 0.30.0Fixed Version: 0.30.0Vulnerability Type: HTTP Header…continue reading..
CVE-2025-55065: High-Risk SQL Injection Threat Enabling Full Database Compromise Threat Advisories AegironJanuary 2, 2026January 2, 20269 mins0 Quick facts What this vulnerability really means CVE-2025-55065 is a classic SQL Injection vulnerability in the ReKord…continue reading..
CVE-2025-68620: Unauthenticated Attackers Can Steal JWT Tokens and Fully Bypass Authentication in Signal K Server Threat Advisories AegironJanuary 2, 2026January 2, 20268 mins0 CVE ID: CVE-2025-68620Affected Product: Signal K ServerAffected Versions: All versions prior to 2.19.0Severity: CriticalCVSS v3.1 Score: 9.1Attack…continue reading..
