Cyber
Drupal warns admins to patch critical Commerce Core access bypass flaw
Drupal urges administrators to immediately patch a critical access bypass vulnerability tracked as CVE-2026-118539 in Commerce Core.
Tag
#Cybersecurity
The latest news, analysis and stories about Cybersecurity — TECC.UZ.
96 articles
Cyber
Drupal Commerce Core CVE-2026-118539 Authorization Flaw Exploited
Drupal warns that threat actors are actively exploiting a highly critical authorization bypass flaw tracked as CVE-2026-118539 in Commerce Core.
Cyber
Gitee: 26400 Exposed Cloud and AI Credentials Found in Public Repos
A security researcher discovered 26400 working cloud and AI credentials accidentally left by developers in public code repositories on Gitee.
Cyber
How Artificial Intelligence is Redefining Security Operations
Exploring how artificial intelligence is taking over security analyst tasks, transforming SOC workflows, and reshaping cybersecurity careers.
Cyber
Telegram Android Bug Allowed Remote Code Execution via Voice Calls
Security startup NebuSec discovered a Telegram for Android flaw that could let attackers take over a phone through a voice call.
Cyber
Webinar: How to Build AI Threat Readiness Into Security
Discover how artificial intelligence changes threat response times and why traditional security operations need an urgent upgrade.
AI
Google Unveils Gemini 4 Carbon: Cybersecurity and Vulnerability Leader
Google has announced Gemini 4 Carbon, its latest frontier model featuring state-of-the-art cybersecurity and vulnerability patching capabilities.
AI
Mistral Large 4 Release: 1-Trillion-Parameter Open-Weight Model Details
Mistral AI released the weights of Mistral Large 4, a 1-trillion-parameter multimodal model with advanced coding and cybersecurity capabilities.
Cyber
Polymarket hacked: prediction market platform loses $2.5 million
Prediction market platform Polymarket suffered a security breach via a third-party service, resulting in the theft of about $2.5 million in crypto.
Cyber
Synology NAS hit by ransomware due to old unpatched flaw
A tech-savvy user's internet-exposed Synology NAS got encrypted by ransomware after skipping security updates for 18 months.
Cyber
Hackers Exploit Cisco SD-WAN Flaw to Deploy Custom KeyDrift Malware
A newly tracked APT group, UAT-11473, is exploiting the CVE-2026-20127 authentication-bypass flaw in Cisco SD-WAN Controllers to deploy the KeyDrift malware.
Cyber
Hacker steals personal data of thousands of Homeland Security employees
Personally identifiable information of over 40,000 DHS staffers, including CBP and ICE agents, has been published online.
Cyber
InfraTrust report warns of exploited flaws in critical network infrastructure
Attackers are actively exploiting vulnerabilities in critical network infrastructure, with PHP flaws known as PHP2Shell putting web management interfaces of firewalls and VPNs at risk.
AI
Claude Code AI finds a cryptominer on a Mac; says it didn’t put it there
A Redditor used Claude Code AI to build a Mac app and discovered a hidden cryptominer running in the system. The AI quickly added an unprompted denial of installing it.
Cyber
PHP2Shell security flaws now successfully exploited in the wild
Two critical RCE vulnerabilities tracked as PHP2Shell are now being actively exploited by threat actors in real-world attacks.
Cyber
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
A new UEFI bootkit called BlackX, active in early 2026, leverages the Baton Drop vulnerability to bypass Secure Boot and target security software.
Cyber
Railway urges developers to rotate secrets after potential security breach
Cloud platform Railway issued an urgent warning to users after detecting suspicious activity on systems storing customer environment variables.
AI
1Password launches solution for safely using logins with AI agents
1Password is expanding its security ecosystem with 1Password for Agents, a new solution designed to let AI agents safely handle website logins without seeing user passwords.
Cyber
Developer platform Railway urges 'all users' to revoke secret keys after cyberattack
The popular developer platform has advised all customers to revoke and rotate their private keys after hackers managed to decrypt some sensitive secrets.
Cyber
CISA: SafePay Ransomware Hits Over 600 Critical Infrastructure Organizations
The Cybersecurity and Infrastructure Security Agency (CISA) reports that the SafePay ransomware gang has breached over 600 critical infrastructure organizations globally since 2024.
Cyber
PHP warns admins of two critical flaws, emergency security patches arriving tomorrow
The PHP security team urges administrators to prepare for urgent security updates following an early leak of details regarding two critical vulnerabilities.
AI
A hacker broke into John Deere and SharkNinja with an army of AI agents
According to AI security firm Norforge, a hacker breached over 100 websites using an army of mostly autonomous AI agents.
Cyber
F5 Releases Out-of-Band Patches for Critical NGINX Vulnerabilities
F5 has rolled out urgent security patches to fix multiple critical vulnerabilities discovered in the NGINX web server.
Cyber
Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM and root
Attackers are actively targeting an OS command injection vulnerability in SiteGuard Server Edition to execute arbitrary commands with highest privileges.