January 2026 Microsoft Security Update Breaks Remote Desktop Sign-In CyberSecurity News CyberDefenderJanuary 18, 2026January 18, 20266 mins0 Microsoft’s January 13, 2026 security update (most notably KB5074109 for Windows 10 and Windows 11, along with…continue reading..
Browser-in-the-Browser Phishing Is Surging: How the Attack Works and How to Spot It CyberSecurity News CyberDefenderJanuary 18, 2026January 18, 20265 mins0 Browser-in-the-Browser (BitB) phishing attacks are gaining momentum because attackers are reviving and refining the technique to evade…continue reading..
CVE-2024-48077: NanoMQ Broker DoS via Uncontrolled Receive Queue Exhaustion Vulnerabilities AegironJanuary 17, 2026January 17, 202610 mins0 CVE ID: CVE-2024-48077Product: NanoMQ MQTT BrokerAffected version: NanoMQ v0.22.7Vulnerability type: Denial of Service (Resource Exhaustion / Deadlock)CVSS…continue reading..
CVE-2026-0897: Keras Model Load “Memory Bomb” – One File Can Crash Your ML Service Vulnerabilities AegironJanuary 17, 2026January 17, 20269 mins0 CVE ID: CVE-2026-0897Product: Google KerasVulnerability Type: Memory Exhaustion / Denial of Service (DoS)Severity: HighCVSS Score: 7.1 (High)Attack…continue reading..
CVE-2026-23519: Silent Cryptographic Timing Leak in RustCrypto cmov on ARM Cortex-M Vulnerabilities AegironJanuary 17, 2026January 17, 20269 mins0 Vulnerability Overview (At a Glance) Field Details CVE ID CVE-2026-23519 Affected Component RustCrypto cmov crate (portable cmovnz…continue reading..
CVE-2021-47753: Unauthenticated File Upload Leads to Full Server Takeover in phpKF CMS Vulnerabilities AegironJanuary 17, 2026January 17, 202610 mins0 CVE: CVE-2021-47753Product: phpKF CMS 3.00 Beta y6Severity: CriticalCVSS (v3.1): 9.8 (Critical)Exploitability: Official patch / upgrade:🔗 Download the…continue reading..
CVE-2026-23490: Malformed ASN.1 RELATIVE-OID Triggers Remote Memory Exhaustion Denial-of-Service in pyasn1 Vulnerabilities AegironJanuary 17, 2026January 17, 20269 mins0 Executive Summary CVE ID: CVE-2026-23490Affected Component: pyasn1 (Python ASN.1 decoding library)Vulnerability Type: Uncontrolled resource consumption (memory exhaustion)Severity:…continue reading..
CVE-2025-67079: One File Upload, Full Server Takeover — Critical RCE in Omnispace Agora Vulnerabilities AegironJanuary 17, 2026January 17, 20267 mins0 Vulnerability Summary CVE ID: CVE-2025-67079Product: Omnispace Agora (self-hosted deployments)Affected Versions: All versions prior to 25.10Vulnerability Type: Unrestricted…continue reading..
CVE-2026-23535: Weblate wlc Enables Arbitrary File Write Through Path Traversal Vulnerabilities AegironJanuary 17, 2026January 17, 202610 mins0 What this vulnerability actually is wlc is a command-line client used to talk to Weblate servers and…continue reading..
CVE-2026-23735: Silent Token Leakage via GraphQL Parallel Request Context Mix-Up Vulnerabilities AegironJanuary 17, 2026January 17, 202611 mins0 CVE: CVE-2026-23735Product: graphql-modules (Node.js GraphQL framework)Affected Versions: All releases between 2.2.1 up to 2.4.0 and 3.0.0 up…continue reading..
