3 casos · pág. 1/1
EG Secure Solutions warns that CVE-2026-106931, an OS command injection flaw in the statistics function of SiteGuard Server Edition, a Japanese host-based WAF, is being exploited in the wild. Successful exploitation lets an attacker run commands as root or SYSTEM on the server hosting the product. The flaw is rated CVSS 4.0 8.5 and CVSS 3…
GreyNoise reports that on 31 August 2026 a likely Russian-speaking malicious cyber actor used 45.142.193.132 and AI to develop, test and deploy exploits for PaperCut NG/MF (CVE-2026-81578 and CVE-2026-82078). Using hundreds of AI agents built on OpenAI's Codex harness, a DeepSeek model and public offensive security tools, the actor compro…
GreyNoise reports that a single malicious cyber actor, tracked since 7 May 2026, is a suspected Chinese speaker working in UTC+8 and is the same as or related to Red Heron (reported by Acronis), based on the shared C2 domain, malware family, Gitea exploitation and other TTPs. The actor exploited the wp2shell WordPress chain (CVE-2026-6303…
