Critical Authentication Bypass Flaws (CVE-2025-30410–30416) Expose Acronis Cyber Protect Backup Servers to Full Remote Takeover Vulnerabilities AegironFebruary 20, 2026February 20, 202611 mins0 Vulnerability Overview CVE IDs: CVE-2025-30410, CVE-2025-30411, CVE-2025-30412, CVE-2025-30413, CVE-2025-30414, CVE-2025-30415, CVE-2025-30416Affected Product: Acronis Cyber Protect (on-prem) and…continue reading..
Critical Security Alert: Hardcoded SSH Keys and Database Credentials Expose RUCKUS Network Director to Full System Takeover (CVE-2025-67305 & CVE-2025-67304) Vulnerabilities AegironFebruary 20, 2026February 20, 202611 mins0 RUCKUS Network Director (RND) – Hardcoded SSH Keys & Hardcoded Database Credentials Executive Summary Product: RUCKUS Network…continue reading..
Critical Better-Auth Flaw Lets Attackers Create API Keys Without Login, Enabling Full Account Takeover CyberSecurity News CyberDefenderFebruary 20, 2026February 20, 20266 mins0 A high-severity security vulnerability in the widely used Better-Auth authentication framework has been disclosed — one that…continue reading..
Researchers Warn China-Linked ‘Volt Typhoon’ Hackers Remain Embedded in U.S. Critical Infrastructure Networks CyberSecurity News CyberDefenderFebruary 20, 2026February 20, 20267 mins0 In 2026, cybersecurity researchers are issuing stark warnings about Volt Typhoon, a sophisticated and persistent cyber threat…continue reading..
FBI Warns of Surge in Malware-Driven ATM “Jackpotting” Attacks, Losses Top $20 Million Nationwide CyberSecurity News CyberDefenderFebruary 20, 2026February 20, 20266 mins0 Earlier this year, the U.S. Federal Bureau of Investigation (FBI) issued a FLASH advisory highlighting a sharp…continue reading..
CISA Warns of Critical Flaws in USR-W610 Industrial Gateway, Exposing OT Networks to Remote Compromise and Wireless Disruption CyberSecurity News CyberDefenderFebruary 20, 2026February 20, 20268 mins0 The USR-W610 industrial serial-to-Ethernet/Wi-Fi gateway, manufactured by Jinan USR IOT Technology Limited, is affected by multiple security…continue reading..
CVE-2026-24790: Critical Authentication Bypass in Welker OdorEyes XL4 Controller Exposes Industrial Gas Systems to Remote Manipulation CyberSecurity News CyberDefenderFebruary 20, 2026February 20, 20268 mins0 CVE: CVE-2026-24790Name: Missing authentication for a critical function in Welker OdorEyes EcoSystem Pulse Bypass System (XL4 Controller)CVSS…continue reading..
Remcos RAT Evolves: New Command-and-Control Techniques Boost Stealth, Real-Time Surveillance, and Evasion Capabilities CyberSecurity News CyberDefenderFebruary 20, 2026February 20, 20267 mins0 Remcos is a Remote Access Trojan (RAT) that—despite its origins as a commercial remote administration product—has become…continue reading..
Industrial-Scale Fake CoreTax Apps Drive Major Fraud in Indonesia: Technical Breakdown CyberSecurity News CyberDefenderFebruary 20, 2026February 20, 20268 mins0 A large-scale fraud campaign exploiting Indonesia’s official CoreTax tax platform has been uncovered, leading to an estimated…continue reading..
“Massiv” Android Trojan Disguised as IPTV App Hijacks Banking Sessions in Real Time, Drains Accounts Across Europe Cyber Threat Intelligence AegironFebruary 20, 2026February 20, 202610 mins0 Fake IPTV App Used for Full Device Takeover & Banking Fraud Executive Summary On 20 February 2026,…continue reading..
