⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A critical vulnerability in cPanel, tracked as CVE-2026-58048, allows authenticated hosting customers to execute SQL commands with database root privileges. The flaw affects all supported versions of cPanel & WHM and WP Squared, and could potentially lead to operating-system-level compromise.
cPanel patched a critical flaw allowing authenticated hosting customers to execute arbitrary SQL commands with full administrative privileges. The vulnerability, tracked as CVE-2026-58048, resides in the database-renaming process and can potentially lead to OS-level compromise.
This article presents a data-driven analysis of how adversaries are weaponizing AI, based on artifacts collected from cloud-based AI models. It finds that attackers are using AI for a range of malicious activities, including code development and vulnerability research, and that existing guardrails are largely ineffective.
This article presents a data-driven analysis of how adversaries are weaponizing AI, based on artifacts collected from cloud-based AI models. It finds that attackers are using AI for a range of malicious activities, including code development and vulnerability research, and that existing guardrails are largely ineffective.
Talos researchers analyzed artifacts from cloud-based AI usage to understand how adversaries exploit AI. They found three categories of malicious activity, including using AI as a malicious software engineer. Guardrails were ineffective, and actor skill determined the sophistication of outputs.
A new Russian loader-as-a-service called DOUBLECUP employs ClickFix decoys to hide malware in cached PNG images. It delivers CountLoader and DeviceManager RAT, using steganography and custom encryption keyed to the victim's IP. The service has been active since June 2026 with a licensing model for operators.