⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
1. Overview The AhnLab SEcurity intelligence Center (ASEC) continuously monitors various threats targeting Linux environments.
The AhnLab SEcurity intelligence Center (ASEC) recently identified attack cases that exploited Radmin and UltraVNC. Although the Initial Intrusion method remains unknown, the attackers installed Radmin—a remote control tool—and then installed UltraVNC. The threat actors exploited the remote control tools to gain control of the infected systems and installed Netch and CCProxy to use the […]
The AhnLab SEcurity intelligence Center (ASEC) recently identified the LegionLoader malware, which is currently being distributed via the ClickFix method. There are two main distribution methods identified so far; both involve tricking users into visiting a malicious URL and then prompting them to directly execute malicious PowerShell commands through a fake Cloudflare CAPTCHA screen.
This article describes CVE-2026-82329, a critical authentication bypass vulnerability in JFrog Artifactory that allows unauthenticated attackers to gain admin privileges. The flaw is actively exploited, enabling token generation and enumeration of sensitive data.
HPE has released security updates addressing a maximum-severity remote code execution vulnerability affecting its network fabric management platform. Tracked as CVE-2026-76658 and rated 10.0 on the CVSS v3.1 scale, the flaw can allow an unauthenticated remote attacker to gain administrative access and execute arbitrary commands as a privileged operating-system user.
This article describes active attacks exploiting two zero-day vulnerabilities in PaperCut NG and MF print management platforms. CVE-2026-81578 is an authentication bypass that, when chained with CVE-2026-82078, enables unauthenticated remote code execution.