Drupal critical update to fix bug with high exploitation risk
Drupal critical update to fix bug with high exploitation risk By Bill Toulas May 20, 2026 08:52 AM Drupal has announced a "core security release" scheduled for later today, warning that…
Search
Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks
…In FakeUpdates attacks, threat actors entice victims with fraudulent software update prompts, usually impersonating browser updates, to trick them into downloading and installing malicious payloads. According to Silent Push researchers, the DriveSurge…
Dashlane password manager users locked out by brute force attacks
…Another update issued on June 1 at 07:32 UTC confirmed the same status, with Dashlane assuring that its team was monitoring the situation and was implementing additional targeted measures. Despite the…
Hackers bypass SonicWall VPN MFA due to incomplete patching
…SonicWall warned in a security advisory for CVE-2024-12802 that installing the firmware update alone on Gen6 devices does not fully mitigate the vulnerability, and a manual reconfiguration of the LDAP…
Microsoft releases Windows 10 KB5099539 extended security update
Microsoft releases Windows 10 KB5099539 extended security update By Lawrence Abrams July 14, 2026 02:49 PM Microsoft has released the Windows 10 KB5099539 extended security update, which includes the July 2026…
Microsoft fixes BitLocker recovery issue only for Windows 11 users
…context-rich validation finds what's exploitable, proves controls hold, and closes the remediation loop. Claim Your Spot Related Articles: Microsoft: April updates trigger BitLocker key prompts on some servers Microsoft shares…
Over 24,000 exposed server BMCs leak password hash via decades-old flaw
…They support low-level actions such as powering servers on/off, updating firmware, or mounting virtual media. Access to BMCs can give attackers control over physical servers, letting them change low-level…
Microsoft blames macOS update for undismissible Teams location prompts
Microsoft blames macOS update for undismissible Teams location prompts By Sergiu Gatlan May 19, 2026 12:10 PM Microsoft has confirmed user reports that the Teams team collaboration app is displaying non…
Certighost and the Privilege Hiding in Your Certificate Authority
CVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesson is standing privilege, implicit trust, and treating PKI…
NFCShare Android malware spreads via fake banking app updates on GitHub
NFCShare Android malware spreads via fake banking app updates on GitHub By Bill Toulas June 8, 2026 06:11 PM New variants of the NFCShare Android malware are being distributed as fake…