Skip to content
Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access

Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access

Swati KhandelwalAug 06, 2026Database Security / Endpoint Security Attackers broke into an organization’s Oracle database through a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit without writing an executable to… 

AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model

AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model

Security flaws in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel let untrusted or forged instructions reach an agent’s tools with no check that a model turn had authorized them. In several of… 

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

Ravie LakshmananAug 06, 2026IoT Security / Malware Cybersecurity researchers have disclosed details of a “factory-shipped backdoor” implanted in at least 20 Chinese router models from Zbtlink. According to a new report from VulnCheck, the implant… 

Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service

Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service

Swati KhandelwalAug 06, 2026Ransomware / Cybercrime A federal judge in Alexandria, Virginia, sentenced Maksim Silnikau to 16 years in prison on August 5 for creating and running Ransom Cartel, the ransomware-as-a-service operation he stood up… 

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild

Ravie LakshmananAug 06, 2026Vulnerability / Enterprise Security A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come under active exploitation in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency… 

Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People

Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People

Swati KhandelwalAug 06, 2026Cybercrime / Law Enforcement Connor Riley Moucka pleaded guilty in Seattle federal court on Wednesday to computer fraud, wire fraud, aggravated identity theft and a related conspiracy over the 2024 breaches of… 

Thousands of servers can be backdoored by exploiting buggy motherboard controllers

Thousands of servers can be backdoored by exploiting buggy motherboard controllers

Thousands of Internet-connected servers sold by the world’s biggest manufacturers can be remotely backdoored by exploiting critical vulnerabilities—some more than a decade old—that lurk deep inside system motherboards, according to research presented Wednesday. Baseboard management…