No, Instagram Wasn’t Hacked — Here’s What Those Password Reset Emails Really Mean CyberSecurity News CyberDefenderJanuary 12, 2026January 12, 20263 mins0 A lot of Instagram users suddenly got password reset emails they didn’t ask for. Naturally, people panicked…continue reading..
How the Suspected Ransomware Attack Disrupted Kyowon Group’s Internal Network CyberSecurity News CyberDefenderJanuary 12, 2026January 12, 20262 mins0 Scope and technical details Data and investigationcontinue reading..
High Cryptographic Flaws in RustCrypto SM2: Remote Crashes and Silent Data Decryption Risks Uncategorized AegironJanuary 11, 2026January 11, 202610 mins0 Vulnerability Summary (at-a-glance) Field CVE-2026-22700 CVE-2026-22699 CVE-2026-22698 CVSS v3.1 Score 7.5 (High) 7.5 (High) 8.1 (High) Severity…continue reading..
CVE-2026-22601: When a Simple Email Setting Turns OpenProject into a Command Execution Gateway Vulnerabilities AegironJanuary 11, 2026January 11, 20267 mins0 Title: OpenProject Sendmail Path Manipulation Leading to Command ExecutionCVE ID: CVE-2026-22601Affected Product: OpenProjectVulnerability Type: OS Command Injection…continue reading..
CVE-2026-0830: Developer Workstations at Risk from Kiro IDE GitLab Command Injection Vulnerabilities AegironJanuary 11, 2026January 11, 20267 mins0 Vulnerability Summary Field Details CVE ID CVE-2026-0830 Vulnerability Type Command Injection (Improper Input Validation) Affected Component Kiro…continue reading..
CVE-2025-15501 & CVE-2025-15500: Critical Unauthenticated OS Command Injection in Sangfor O&M Enabling Remote Root-Level System Takeover Vulnerabilities AegironJanuary 11, 2026January 11, 20269 mins0 Affected Product Information Product Vendor Component Typical Exposure Sangfor O&M Platform Sangfor Operations & Maintenance Management Service…continue reading..
CVE-2026-22584: Silent Code Execution Through Trusted Data Files in Salesforce Uni2TS Vulnerabilities AegironJanuary 11, 2026January 11, 20269 mins0 CVE ID: CVE-2026-22584Product Affected: Salesforce Uni2TS (Universal Integration to Transformation Service)Vulnerability Type: Code Injection due to unsafe…continue reading..
CVE-2026-22600: Silent Data Leak Through OpenProject PDF Export – When SVGs Turn Reports into File Disclosure Weapons Vulnerabilities AegironJanuary 11, 2026January 11, 20268 mins0 Vulnerability Name: OpenProject PDF Export SVG/ImageMagick Local File Read (LFR)CVE ID: CVE-2026-22600Affected Product: OpenProject (PDF export functionality)Component:…continue reading..
Silent Pickle, Full System Takeover: Critical RCE Bypasses in Fickling Vulnerabilities AegironJanuary 11, 2026January 11, 20268 mins0 Product: Fickling Fickling is a Python security library designed to analyze and restrict unsafe behavior in serialized…continue reading..
CVE-2026-22688: Critical WeKnora MCP stdio Command Injection Enabling Remote System Takeover Vulnerabilities AegironJanuary 11, 2026January 11, 20268 mins0 Vulnerability Identifier CVE ID: CVE-2026-22688 Vulnerability Type Command Injection (OS Command Execution)CWE: CWE-78 – Improper Neutralization of…continue reading..
