Aggregator

A critical vulnerability (CVE-2026-48558) in SimpleHelp, a popular remote monitoring and management (RMM) tool, can be exploited remotely by unauthenticated attackers to create a new “Technician” account and use it to remote into managed endpoints, execute scripts, and more. Maliciously “forged” Technician account (Source: Horizon3.ai) The vulnerability CVE-2026-48558 is an authentication bypass flaw affecting SimpleHelp deployments configured to use OpenID Connect (OIDC) authentication. “Even when the SimpleHelp server is configured to enforce MFA for technicians, … More →

The post SimpleHelp RMM flaw could give attackers full access to managed endpoints (CVE-2026-48558) appeared first on Help Net Security.

Специалисты восстановили всю инфраструктуру кибератак, не взломав ни одной жертвы.

20年目睹SMM安全之怪现状~

通过自动设置 worker 数量充分利用多核 CPU 资源，从而显著提升整体处理效率与吞吐能力，适用于大规模网络流量数据的特征工程与数据集构建任务。

Rokarolla Android trojan steals banking logins and spies on victims while blocking fraud alerts

Security researchers at Zimperium's zLabs have documented a new Android banking trojan, Rokarolla, that targets 217 banking and cryptocurrency apps and packs 137 remote commands. Together, they give an operator near-total control of an infected phone: it lifts lock-screen PINs, reads and sends SMS, rewrites the clipboard to redirect crypto payments, and switches off Google Play

A vulnerability described as critical has been identified in LatePoint Plugin up to 5.5.1 on WordPress. This vulnerability affects unknown code. Such manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-8176. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in WP Review Slider Pro Plugin up to 12.6.8 on WordPress and classified as critical. Affected by this vulnerability is the function wpfb_hidereview_ajax of the component AJAX Handler. Performing a manipulation results in path traversal. This vulnerability was named CVE-2026-8442. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in Moxa NPort W2150A-W4, W2250A-W4, NPort W2150A and W2250A up to 1.5 and classified as critical. Affected by this issue is some unknown functionality of the component Web Service. Executing a manipulation can lead to stack-based buffer overflow. The identification of this vulnerability is CVE-2026-10829. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in Moxa NPort W2150A-W4, W2250A-W4, NPort W2150A and W2250A up to 1.5. It has been classified as critical. This affects an unknown part of the component Web Service. The manipulation of the argument alias leads to format string. This vulnerability is referenced as CVE-2026-10828. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in FuseSource jansi up to 2.4.3. It has been rated as critical. This issue affects the function ioctl. This manipulation causes heap-based buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is tracked as CVE-2026-8484. The attack is restricted to local execution. No exploit exists.

A vulnerability was found in themagnifico52 Kids Online Store Plugin up to 0.8.9 on WordPress. It has been declared as critical. This vulnerability affects unknown code. The manipulation results in unrestricted upload. This vulnerability is identified as CVE-2026-40750. The attack can be executed remotely. There is not any exploit available.

A vulnerability categorized as critical has been discovered in Syracom Secure Login for Jira, Secure Login for Confluence and Secure Login for Bitbucket. Impacted is an unknown function. Such manipulation leads to authentication bypass using alternate channel. This vulnerability is listed as CVE-2026-12225. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.

Рассказываем подробности о хакерской кибероперации Operation Highland.

AppViewX has announced Agent Identity Security, a new product within the AppViewX platform that discovers, governs, secures, and monitors AI agents across the entire enterprise. Agent Identity Security extends AppViewX’s platform, built on a decade of machine identity and PKI expertise, into AI agent security, giving CISOs and their teams a single control plane for every machine and agent identity in their environment. The converging threats: Agentic AI and quantum computing Two megatrends are colliding … More →

The post AppViewX extends machine identity security to AI agents and post-quantum environments appeared first on Help Net Security.

New York, United States of America, 16th June 2026, CyberNewswire

Get unified visibility into your email authentication posture and reach full DMARC enforcement with deeper reporting, record analysis, and SPF audits free for every Cloudflare customer.

Zimperium researchers discover a new mobile Trojan that hijacks clipboards, blocks bank calls, and takes complete control of Android devices.

Teleport has announced the debut of two foundational capabilities of its Agentic Identity Framework in the public beta of Beams: LLM Proxy and Delegated Identity. These capabilities address a critical gap in how organizations deploy AI agents: the lack of identity, access control, and auditability at the two most consequential points in an agentic workflow—what the agent is instructed to do and what it is permitted to access. Much of AI innovation to date has … More →

The post Teleport adds LLM Proxy and Delegated Identity to secure AI agent actions and access appeared first on Help Net Security.