⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A new White House memo signed by President Trump instructs the National Coordination Center to establish a program allowing private security companies to apply for approval to hack foreign cybercrime organizations.
The Trump administration will allow private companies to launch attacks on cybercrime organizations, the White House announced.
FortiGuard Labs analyzes Evooo1Bot, a modular Linux botnet that targets internet-facing devices. The botnet is capable of launching DDoS attacks, SSH attacks, CVE exploits, and SOCKS relays to compromise systems.
The ransomware landscape in Q2 2026 shows a shift toward decentralization, with more groups active but lower dominance by top players. Payment rates continue to decline, but high-value targets still yield significant revenue.
A stored cross-site scripting vulnerability (CVE-2026-34491) in Johnson Controls Metasys versions 12 through 15 allows low-privilege users to inject persistent payloads via crafted URLs. These payloads execute in the context of other users, including administrators, enabling session hijacking and unauthorized access.
Siemens License Server contains a local privilege escalation vulnerability (CVE-2026-69108) due to an insecure sudoers policy and a path traversal flaw (CVE-2026-69109) allowing remote arbitrary file access. Affected versions are below 5.1 and 5.3 respectively, and Siemens recommends updating to the latest version immediately.