News that matters, without the noise.

Oracle’s First Monthly Patches Resolve 77 Vulnerabilities

Oracle’s monthly Critical Security Patch Update (CSPU) rollouts are meant to deliver critical fixes faster. The post Oracle’s

MYDFIR DFIR Course: Overview (NEW DFIR COURSE)

POV: Avoiding your responsibilities

Gamaredon APT Hides Malware in Windows Features and Abuses Cloud Platforms for C2

Gamaredon, a Russian state-backed espionage group, is deploying a new VBScript worm that hides inside native Windows features

Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded

Password manager Dashlane has disclosed that “fewer than” 20 users on the personal subscription plan had their encrypted

RHSA-2026:22334: Important: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat

Hackers Use Meta’s AI Bot to Reset Passwords and Hijack Instagram Accounts

A critical logic flaw in Meta’s AI-powered Instagram support chatbot allowed attackers to bypass two-factor authentication entirely, not

RHSA-2026:22330: Important: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.

RHSA-2026:22329: Important: openssh security update

An update for openssh is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

RHSA-2026:22328: Important: java-21-ibm-semeru-certified-jdk security update

An update for java-21-ibm-semeru-certified-jdk is now available for Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat

Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks

A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and FakeUpdates techniques

CVE-2026-8206

Severity Not Scored Description The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is