GoKawiil - Tech News

61.

KnowledgeDeliver flaw exploited as a zero-day to install web shells (bleepingcomputer.com)

2026-05-26 | get Cybersecurity Web Shell Toolkit → | tags: knowledgedeliver, cve-2026-5426, web shells

62.

BadHost – CVE-2026-48710: Starlette Host-Header Auth Bypass (news.ycombinator.com)

2026-05-26 | by D-Sec | get Starlette Web Framework Book → | tags: starlette, cve-2026-48710, host-header

63.

CISA orders feds to patch actively exploited Drupal vulnerability (bleepingcomputer.com)

2026-05-26 | get Drupal Security Patch Kit → | tags: cisa, drupal, cve-2026-9082

64.

CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by Claude (news.ycombinator.com)

2026-05-25 | get Apple MacBook Air M2 → | tags: apple, macos, cve-2026-28952

65.

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign (bleepingcomputer.com)

2026-05-24 | get SQL Injection Testing Tool → | tags: ghost cms, sql injection, cve-2026-26980

66.

Trend Micro warns of Apex One zero-day exploited in the wild (bleepingcomputer.com)

2026-05-22 | get Trend Micro Apex One Security → | tags: trend micro, apex one, cve-2026-34926

67.

Drupal: Critical SQL injection flaw now targeted in attacks (bleepingcomputer.com)

2026-05-22 | get SQL Injection Security Kit → | tags: drupal, sql injection, postgresql

68.

Claire’s closed hundred of stores. Now the tween mall brand is turning up in locations you’d never expect (feeds.feedburner.com)

2026-05-21 | get Claire's Store Locator Kit → | tags: claire’s, cvs, walmart

69.

Max severity Cisco Secure Workload flaw gives Site Admin privileges (bleepingcomputer.com)

2026-05-21 | get Cisco Secure Workload Security Book → | tags: cisco secure workload, cve-2026-20223, site admin privileges

70.

Microsoft warns of new Defender zero-days exploited in attacks (bleepingcomputer.com)

2026-05-21 | get Microsoft Defender Security Pack → | tags: microsoft defender, zero-day exploits, cve-2026-41091

71.

Hackers bypass SonicWall VPN MFA due to incomplete patching (bleepingcomputer.com)

2026-05-20 | get SonicWall VPN Security Kit → | tags: sonicwall, cve-2024-12802, gen6

72.

Fintech firm Mercury hits $5.2 billion valuation after funding round, up 49% in 14 months (cnbc.com)

2026-05-20 | by Hugh Son | get Mercury Startup Tech Notebook → | tags: mercury, fintech, tcv

73.

Max-severity flaw in ChromaDB for AI apps allows server hijacking (bleepingcomputer.com)

2026-05-19 | get ChromaDB Security Patch → | tags: chromadb, cve-2026-45829, fastapi

74.

Critical Microsoft Vulnerabilities Doubled: From Exposure to Escalation (bleepingcomputer.com)

2026-05-19 | get Microsoft Security Patch Kit → | tags: microsoft vulnerabilities, beyondtrust, elevation of privilege

75.

New Windows 'MiniPlasma' Zero-Day Exploit Gives SYSTEM Access, PoC Released (slashdot.org)

2026-05-18 | get Windows Security Patch Kit → | tags: windows, miniplasma, cve-2020-17103

76.

Microsoft Exchange Zero-Day Under Attack, No Patch Available (darkreading.com)

2026-05-18 | get Microsoft Exchange Security Book → | tags: microsoft exchange, cve-2026-42897, outlook web access

77.

When Fast Fourier Transform Meets Transformer for Image Restoration (2024) (news.ycombinator.com)

2026-05-18 | get Fourier Transform Image Filter → | tags: fast fourier transform, transformer, image restoration

78.

Exploit available for new DirtyDecrypt Linux root escalation flaw (bleepingcomputer.com)

2026-05-18 | get Linux Exploit Development Book → | tags: dirtydecrypt, linux kernel, rxgk module

79.

Microsoft Exchange Server Vulnerability Actively Exploited, in a Bad Week for Microsoft (slashdot.org)

2026-05-17 | by Posted | get Microsoft Exchange Server Security Kit → | tags: microsoft exchange server, cve-2026-42897, outlook web access

80.

Anyone on the Internet Can Ring Your Doorbell (news.ycombinator.com)

2026-05-17 | get Ring Video Doorbell → | tags: naxclow, smart doorbell, x smart home

81.

Microsoft rejects critical Azure vulnerability report, no CVE issued (bleepingcomputer.com)

2026-05-16 | get Azure Security Monitoring Tool → | tags: azure, microsoft, cve

82.

Avada Builder WordPress plugin flaws allow site credential theft (bleepingcomputer.com)

2026-05-15 | get WordPress Security Plugin → | tags: avada builder, wordpress, cve-2026-4782

83.

Microsoft warns of Exchange zero-day flaw exploited in attacks (bleepingcomputer.com)

2026-05-15 | get Microsoft Exchange Security Patch → | tags: exchange server, microsoft, cve-2026-42897

84.

Maximum Severity Cisco SD-WAN Bug Exploited in the Wild (darkreading.com)

2026-05-14 | by Nate Nelson | get Cisco SD-WAN Security Patch → | tags: cisco, sd-wan, cvss

85.

New Nginx Exploit (news.ycombinator.com)

2026-05-14 | get Nginx Security Patch Kit → | tags: nginx, cve-2026-42945, heap buffer overflow

86.

Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin (bleepingcomputer.com)

2026-05-14 | get WordPress Security Plugin → | tags: burst statistics, wordpress plugin, cve-2026-8181

87.

Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks (bleepingcomputer.com)

2026-05-14 | get Cisco SD-WAN Security Kit → | tags: cisco, catalyst sd-wan, cve-2026-20182

88.

18-year-old NGINX vulnerability allows DoS, potential RCE (bleepingcomputer.com)

2026-05-14 | get NGINX Security Patch → | tags: nginx, cve-2026-42945, reverse proxy

89.

New Fragnesia Linux flaw lets attackers gain root privileges (bleepingcomputer.com)

2026-05-14 | get Linux Kernel Security Book → | tags: linux, kernel, fragnasia

90.

It's Patch Tuesday for Microsoft & Not a Zero-Day In Sight (darkreading.com)

2026-05-12 | by Jai Vijayan | get Microsoft Security Update Kit → | tags: attacker, code, cves