Skip to content
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

Swati KhandelwalAug 28, 2026Vulnerability / Web Security cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the… 

PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

Ravie LakshmananAug 28, 2026Vulnerability / Enterprise Security PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks.… 

APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations

APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations

Cybersecurity researchers have flagged a fresh set of campaigns targeting government and diplomatic organizations in Romania, Spain, and Türkiye between late September 2025 and early April 2026. These campaigns, per Recorded Future Insikt Group, have… 

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face

OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack of Hugging Face last month, adding that it found evidence of misaligned behavior as early as late May.… 

Amazon’s newest Echo Show 11 smart display is  off right now

Amazon’s newest Echo Show 11 smart display is $60 off right now

NOW $60 OFF Amazon Echo Show 11 View Deal (function () { document.querySelector(“#sticky-promo-block a”).addEventListener(“click”, function(e) { const debug = document.location.host.search(/lndo.site|go-vip.net/) !== -1; const text = this.closest(“#sticky-promo-block”).querySelector(“p.promo-title”).textContent; const data = { event: “stickyConversionUnitClick”, eventCategory: “Sticky Conversion”,… 

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE

Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through…