5 mentions in 7 days · 5 in 30 days · 5 total · first seen · last
SolarWinds has patched two RCE vulnerabilities in Observability Self-Hosted, affecting all versions up to 2026.2.3.
SolarWinds has released patches for two RCE vulnerabilities in Observability Self-Hosted, affecting all versions up to 2026.2.3, including CVE-2026-28324 and CVE-2026-28325.
Ransomware gangs are exploiting a critical JetBrains TeamCity flaw (CVE-2026-63077) and are being used in ransomware attacks.
Ransomware gangs are now exploiting a critical JetBrains TeamCity flaw (CVE-2026-63077), which allows unauthenticated attackers to execute arbitrary operating system commands and potentially expose sensitive data.
A Ryuk ransomware operator was sentenced to 2 years in prison for extorting over $1.2 million from victims.
An Armenian national, Karen Vardanyan, was sentenced to two years in U.S. federal prison for his role as a core member of the Ryuk ransomware gang. Prosecutors stated that Vardanyan and his co-conspirators launched over 2,400 ransomware attacks worldwide, including on state and local municipalities and the Universal Health Services hospital chain, receiving at least $15 million in ransoms. Vardanyan personally extorted over $1 million from victims. The Ryuk gang has been linked to Russian cybercriminals and the Trickbot malware, and several other members have been identified and arrested.
A crafted comment (Comment2Shell) allowed an attacker to run code on the server via a line break in an HTML attribute. Another flaw, Click2Shell, enabled theme installation and further code execution. WordPress has had…
Two separate security flaws: Comment2Shell allowing code execution via comments and Click2Shell enabling theme installation. These were patched in the latest WordPress releases and are considered exploitable issues.
An anonymous comment can run code if an admin opens the page, using a crafted link to install a theme and execute commands with admin access. These are stack-based buffer overflow vulnerabilities in CGI of Zyxel…
Three ITEMs discussed security vulnerabilities and exploitation techniques. Comment2Shell allows admin to execute code, Click2Shell installs theme and runs with admin, and V vulnerability in CGI of Zyxel switches.