News Archives

Dutch Authorities Take Down Botnet That Infected an Estimated 17 Million Devices

Dutch police and the National Cyber Security Center have dismantled a botnet that infected at least 17 million devices and relied on over 200 Netherlands-based servers. The takedown involved seizing backend infrastructure tied to a residential proxy service reportedly linked to the network.

May 30, 2026

GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure

CrowdStrike, together with Google and the Shadowserver Foundation, dismantled all command-and-control channels used by GlassWorm — a persistent campaign that infected developer tooling via trojanized extensions and packages to enable large-scale software supply chain attacks.

May 28, 2026

Ghost CMS CVE-2026-26980 Used to Compromise 700+ Websites in ClickFix Campaign

Threat actors have abused a critical SQL injection in Ghost CMS (CVE-2026-26980) to inject JavaScript and compromise over 700 sites, delivering ClickFix social-engineering malware via a two-stage loader and a commercial cloaking service.

May 26, 2026

Claude Mythos and Project Glasswing Reveal Thousands of Severe Flaws in Critical Software

Anthropic says Project Glasswing and Claude Mythos Preview have surfaced over 10,000 vulnerability candidates, with thousands confirmed and many high-severity issues patched; the company urges faster patching and has launched a Cyber Verification Program.

May 24, 2026

LiteSpeed cPanel Plugin Exploited to Run Scripts as Root

A critical LiteSpeed cPanel plugin flaw (CVE-2026-48172, CVSS 10.0) is being exploited to run scripts as root. Patches and mitigation steps are provided.

May 23, 2026

9-Year-Old Linux Kernel Bug Lets Local Users Escalate to Root on Major Distributions

A nine-year-old Linux kernel bug (CVE-2026-46333) lets local users read sensitive files and run commands as root on common distributions; Qualys details the flaw and workarounds. Also covers the PinTheft local privilege escalation PoC.

May 22, 2026