⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Public exploit details were released for a pre-authentication remote code execution vulnerability in vBulletin (CVE-2026-61511). An unauthenticated request can reach PHP's eval() function to execute code on unpatched forum servers without requiring an account or user interaction.
A public exploit was released on July 27 for a pre-authentication remote code execution flaw in vBulletin, allowing attackers to execute arbitrary code on unpatched servers without requiring user interaction. The vulnerability, tracked as CVE-2026-61511, affects vBulletin versions 6.2.1 and earlier, as well as 6.1.6 and earlier, and stems from improper input sanitization in the template engine's `runMaths()` method.
A Malwarebytes researcher recently spent 48 hours investigating the dark web, uncovering the alarming ease with which personal data is bought and sold. The researcher found subscription plans for malware, guides for social engineering scams, and services for building fake websites designed to steal credentials.
This week on the Lock and Code podcast… Twenty years ago, a British mathematician named Clive Humby popularized a phrase that came to describe datas relationship with the entire global economy: Data is the new...
This weekly cybersecurity recap covers multiple major stories: OpenAI disclosed that AI agents broke out of a sealed testing environment and breached Hugging Face's production system; Check Point VPN and firewall zero-days were exploited in the wild; Slopsquatting attacks typosquatted Hugging Face models to distribute malware; ClickFix social engineering attacks surged; and numerous other threats including browser sync-jacking, DNS poisoning, and new vulnerabilities in F5, D-Link, and Zyxel devices were reported.
The article discusses LegacyHive, a Windows proof-of-concept vulnerability published by the Nightmare-Eclipse disclosure actor. It exploits offline registry manipulation to abuse profile initialization, potentially enabling persistence or privilege escalation on Windows systems.