Skip to main content
The Wire
FILEDMI5 Says China’s MSS Funded Research Involving More Than 100 U.K.-Linked Academics CRITICALWarlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware FILEDAndroid 17 Advanced Protection Blocks Unverified Apps From Accessibility Services FILEDPolice Disrupt KillSec Ransomware Group and Arrest Suspected 16-Year-Old Operator CRITICALApple CoreGraphics Zero-Day PoC Emerges as WhatsApp PDF Checks Raise Delivery Questions FILEDAttackers Abuse ChatGPT Custom GPTs to Deliver RAT Malware via ClickFix FILEDStar Blizzard Targets 100+ Organizations With Fake Event Invites and CosmicPulse Backdoor CRITICALKiteworks Fixes Critical Vulnerability Discovered During Emergency Shutdown FILEDMI5 Says China’s MSS Funded Research Involving More Than 100 U.K.-Linked Academics CRITICALWarlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware FILEDAndroid 17 Advanced Protection Blocks Unverified Apps From Accessibility Services FILEDPolice Disrupt KillSec Ransomware Group and Arrest Suspected 16-Year-Old Operator CRITICALApple CoreGraphics Zero-Day PoC Emerges as WhatsApp PDF Checks Raise Delivery Questions FILEDAttackers Abuse ChatGPT Custom GPTs to Deliver RAT Malware via ClickFix FILEDStar Blizzard Targets 100+ Organizations With Fake Event Invites and CosmicPulse Backdoor CRITICALKiteworks Fixes Critical Vulnerability Discovered During Emergency Shutdown
CyberNews by Zentrya One
Section

Vulnerabilities

Disclosed flaws, patches and exploitation status.

critical CVE-2026-81642 Vulnerabilities

Critical Unbound DNSSEC Flaw Could Enable Remote Code Execution

NLnet Labs patches critical Unbound vulnerability CVE-2026-81642, a CVSS 9.1 DNSSEC validator heap overflow that could cause denial of service or potentially enable remote code execution.

Zentrya One Desk 18 Sept 2026 2 min read
critical CVE-2026-27540 Vulnerabilities

Hackers Exploit Critical WooCommerce Plugin Flaw to Plant PHP Web Shells

Threat actors are actively exploiting a critical vulnerability in the Wholesale Lead Capture Plugin for WooCommerce, allowing unauthenticated attackers to upload malicious PHP files and potentially take complete control of vulnerable WordPress websites.

Zentrya One Desk 18 Sept 2026 6 min read
critical CVE-2026-5430 Vulnerabilities

Hackers Exploit Critical WSO2 API Manager JWT Flaw Using Forged Admin Tokens

Security researchers have detected active exploitation attempts targeting a critical authentication-bypass vulnerability in WSO2 API Manager, with attackers sending forged JSON Web Tokens (JWTs) containing administrator privileges.

Zentrya One Desk 16 Sept 2026 6 min read
The Daily Brief

Stay informed. Stay prepared. Stay one step ahead.

One brief each morning: the advisories that matter, the noise removed.

Double opt-in. One-click unsubscribe in every email. We never sell addresses.