Skip to content
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

Swati KhandelwalNov 01, 2026Vulnerability / Cloud Security A critical flaw in Canonical’s LXD and MicroCloud let an attacker log in as a trusted client without holding that client’s private key. To do it, the attacker… 

Read More »CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
Hackers Steal About .7 Million From Polymarket Traders via Hijacked DebugBear Script

Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script

Malicious code on the website of prediction market Polymarket sold some signed-in traders’ positions and moved their funds to the hackers on October 29. The code had replaced a page-speed script that the site loaded… 

Read More »Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection

NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection

Ravie LakshmananNov 01, 2026Windows Security / Cyber Espionage Cybersecurity researchers have disclosed details of what has been described as a “highly sophisticated infection chain” targeting government organizations in Asia. The activity, detailed by Kaspersky this… 

Read More »NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data

Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data

Ravie LakshmananOct 31, 2026Data Security / Cyber Attack American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted… 

Read More »Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

Ravie LakshmananOct 31, 2026Vulnerability / Cyber Attack The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active… 

Read More »Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access