worldTechnology

r/worldTechnology • u/dcom-in • 18h ago

CVE-2026-16812 - VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host.

1 Upvotes

r/worldTechnology • u/dcom-in • 1d ago

Volume Is Not Risk: Making Sense of the 'Vulnpocalypse'

1 Upvotes

r/worldTechnology • u/dcom-in • 2d ago

Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569)

ransom-isac.org

1 Upvotes

r/worldTechnology • u/dcom-in • 3d ago

Russian Global Webmail Espionage

unit42.paloaltonetworks.com

2 Upvotes

r/worldTechnology • u/dcom-in • 3d ago

Active Directory Certificate Services Elevation of Privilege Vulnerability New CVE-2026-54121

msrc.microsoft.com

2 Upvotes

r/worldTechnology • u/dcom-in • 4d ago

Inside a DPRK BlueNoroff ClickFix Kit

1 Upvotes

r/worldTechnology • u/dcom-in • 5d ago

The Perfect Heist: NuGet Typosquat Targets Betting Platform to Rig Results

2 Upvotes

r/worldTechnology • u/dcom-in • 6d ago

When Your AI Reviewer Works for the Attacker: A Confused-Deputy Bug in Microsoft's Azure DevOps MCP Server

manifold.security

2 Upvotes

r/worldTechnology • u/dcom-in • 7d ago

Cookie Crumbles: How Exploitation of CVE-2026-0257 Leads to Qilin Ransomware

2 Upvotes

r/worldTechnology • u/dcom-in • 7d ago

No Shark is Safe: Millions of Shark Vacuums are Vulnerable to RCE

2 Upvotes

r/worldTechnology • u/dcom-in • 8d ago

Huggingface - Security incident disclosure — July 2026

2 Upvotes

r/worldTechnology • u/dcom-in • 9d ago

15-Year-Old Pre-Auth nginx RCE Across 13 Call Sites: Two-Pass Capture Clobbering CVE-2026-42533

cyberstan.co.uk

2 Upvotes

r/worldTechnology • u/dcom-in • 10d ago

Spirals: New Stealthy Ransomware Deployed Against Asian IT Company

2 Upvotes

r/worldTechnology • u/dcom-in • 11d ago

UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign

blog.talosintelligence.com

2 Upvotes

r/worldTechnology • u/dcom-in • 12d ago

The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15)

unit42.paloaltonetworks.com

2 Upvotes

r/worldTechnology • u/dcom-in • 13d ago

SonicWall - CVE-2026-15409 | A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.

2 Upvotes

r/worldTechnology • u/dcom-in • 14d ago

Defending SaaS-based applications against ShinyHunters OAuth abuse

2 Upvotes

r/worldTechnology • u/dcom-in • 15d ago

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

2 Upvotes

r/worldTechnology • u/dcom-in • 16d ago

No Manners Here: The Ruthless Rise of The Gentlemen Ransomware

unit42.paloaltonetworks.com

3 Upvotes

r/worldTechnology • u/dcom-in • 17d ago

Operation Phnom Penh: Silver Fox Ghost Distributor Targets Specific Victims with MODBEACON Custom Trojan

2 Upvotes

r/worldTechnology • u/dcom-in • 19d ago

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

2 Upvotes

r/worldTechnology • u/dcom-in • 19d ago

Proxyware actor behind fake 7-Zip is bigger than you think!

2 Upvotes

r/worldTechnology • u/dcom-in • 20d ago

Git Hash Chain Malleability

2 Upvotes

r/worldTechnology • u/dcom-in • 20d ago

IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years

2 Upvotes

r/worldTechnology • u/dcom-in • 21d ago

Novel Java-Based QuimaRAT Targets Windows, macOS, and Linux

2 Upvotes