Another option is to disable the service by entering request pfe anomalies disable in the operating system’s command line. Sharma said Juniper vulnerabilities have attracted a lot of attention from hackers over the years because of the premium positioning the… Read More "Security hole could let hackers take over Juniper Networks PTX core routers"
A critical authentication vulnerability affecting the Appsmith low-code platform has been exploited to take over user accounts. The issue, assigned CVE-2026-22794, allows attackers to manipulate password reset links by abusing a client-controlled HTTP header, ultimately leading to full account compromise.… Read More "Critical Appsmith Flaw Enables Account Takeovers"
Ravie LakshmananFeb 27, 2026Malware / Linux Security Cybersecurity researchers have disclosed details of a malicious Go module that’s designed to harvest passwords, create persistent access via SSH, and deliver a Linux backdoor named Rekoobe. The Go module, github[.]com/xinfeisoft/crypto, impersonates the… Read More "Malicious Go Crypto Module Steals Passwords, Deploys Rekoobe Backdoor"
For more than a decade, Google’s developer documentation has described these keys, identified by the prefix ‘Aiza’, as a mechanism used to identify a project for billing purposes. Developers generated a key and then pasted it into their client-side HTML… Read More "‘Silent’ Google API key change exposed Gemini AI data"
System administrators are likely to have a busy February after Microsoft released updates to fix six actively exploited zero-day vulnerabilities, three of which have been publicly disclosed. The zero-days are as follows: CVE-2026-21510 is a security feature bypass vulnerability in… Read More "Microsoft Fixes Six Zero Day Vulnerability in February Patch Tuesday"
Ravie LakshmananFeb 27, 2026Financial Crime / Social Engineering The U.S. Department of Justice (DoJ) this week announced the seizure of $61 million worth of Tether that were allegedly associated with bogus cryptocurrency schemes known as pig butchering. The confiscated funds… Read More "DoJ Seizes $61 Million in Tether Linked to Pig Butchering Crypto Scams"
The demands for, and challenges of, deploying AI applications has ratcheted up the urgency to bring data centers into the AI age. It’s a strategic imperative and success requires partners across the infrastructure spectrum, from servers and storage to high-performance… Read More "Spotlight report: Accelerating Data Center Modernization"
Vulnerability disclosures are on track to hit, or even surpass, a record-breaking 50,000 in 2026 according to the Forum of Incident Response and Security Teams (FIRST). In its 2026 Vulnerability Forecast, published on February 11, the non-profit predicted a median… Read More "FIRST Forecasts Record-Breaking 50,000+ CVEs in 2026"
Posted by Chrome Secure Web and Networking Team Today we’re announcing a new program in Chrome to make HTTPS certificates secure against quantum computers. The Internet Engineering Task Force (IETF) recently created a working group, PKI, Logs, And Tree Signatures… Read More "Cultivating a robust and efficient quantum-safe HTTPS"
Ravie LakshmananFeb 27, 2026Network Security / Vulnerability The Shadowserver Foundation has revealed that over 900 Sangoma FreePBX instances still remain infected with web shells as part of attacks that exploited a command injection vulnerability starting in December 2025. Of these,… Read More "900+ Sangoma FreePBX Instances Compromised in Ongoing Web Shell Attacks"
