Qlik Sense Attacks: Preparing Exploits for ActiveMQ and Veeam
Cynet recorded attacks on Qlik Sense: reverse shells and preparation of exploits for ActiveMQ and Veeam. Technique breakdown and defense.
Blog
Critical Zoom Workplace for Windows Vulnerability (CVSS 9.6)
Zoom released updates for two Zoom Workplace vulnerabilities, including critical CVE-2026-108186 (CVSS 9.6): unauthenticated privilege escalation.
Outlook 0-day Steals NTLM Hashes: November Patch Tuesday
Microsoft closed a record 1,200+ vulnerabilities. The actively exploited 0-day CVE-2026-124194 in Outlook steals NTLMv2 hashes. How to protect yoursel...
NEAR AI Breach via RCE in SGLang: Data of 100 Users
An RCE in SGLang opened NEAR AI's inference server to an attacker: ~100 users' data, 18 agents, and 2 API keys. Incident breakdown and defense.
Cereal: How Turla Steals Mail from Government Exchange Servers
ESET discovered Cereal — Turla's modular toolkit that steals mail from government Exchange servers with no external C&C server.
Qubole Breach: How Trusted AWS Access Exposed Customer Data
Hackers used Qubole's IAM credentials to steal secrets and customer data via forgotten cross-account roles in AWS. How to check accounts and protect y...
BOSSAI: One Hacker and 12 AI Agents vs Emergency Services
How one hacker and 12 AI agents stole Taiwan emergency-services data: a breakdown of the BOSSAI campaign, technical details, and defense tips.
SonicWall SonicOS: MFA Bypass in SSL-VPN (CVE-2026-19868)
MFA bypass in SonicWall SSL-VPN (CVE-2026-19868) is already exploited. CISA added it to KEV. Which versions are vulnerable and how to update.
CVE-2026-119977: WordPress Update Became a Vulnerability
Actively exploited CVE-2026-119977 in WordPress: during the update itself, an attacker can execute code on the server. Who's at risk and how to protec...
Claude Code: Passwords and Keys in Public GitHub Repositories
How the 'Yes, and don't ask again' option in Claude Code saves passwords and API keys in a file that ends up in public GitHub repositories — Apiiro re...
OpenSSH 'sshole' Vulnerability: Passwordless Login on Alpine
CVE-2026-123158 ('sshole'): on OpenSSH on musl systems (Alpine), you can log in without a password. Already exploited — how to check and update.
APT Vulnerability: Package Substitution and Root Code Execution
CVE-2026-109518 in the APT package manager lets a man-in-the-middle attacker substitute a verified package and run code as root on Debian and Ubuntu....