New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
What's new: A new vulnerability, tracked as CVE-2026-64561, has been discovered in the KVM (Kernel-based Virtual Machine) that could allow...
nsamag
TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign
What's new: TeamPCP, a threat actor linked to various cybercrime activities since 2020, has been identified as responsible for attacks...
Your Cloud Scan Now Reports What It Did Not Check: Inside NSAuditor AI Enterprise 0.32.11
Ask any experienced assessor what separates a scan report they can rely on from one they cannot, and the answer...
Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses
What's new: Researchers have identified a new technique called NullReceiver, used in two trojanized npm packages, "bianira-ui" and "fluid-type-ui," which...
Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug
What's new: Veeam, HashiCorp, and Django have released patches for critical vulnerabilities. Notable issues include a CVSS 10.0 cross-tenant bug...
