TechLogHub Blog — Page 18 of 25
Insights, guides, and product strategy for builders and product teams.
AgingFly Malware Used in Attacks on Ukraine's Government and Hospitals
Ukraine’s CERT-UA has identified a new malware family, AgingFly, used in attacks against local governments and hospitals to steal Chromium-based browser data and WhatsApp messages, with potential targeting of Defense Forces. The campaign, attributed to cluster UAC-0247, begins with a phishing email offering humanita…
Critical Nginx UI Authentication Bypass Flaw Now Actively Exploited in the Wild
Researchers warn of a critical Nginx UI vulnerability (CVE-2026-33032) in MCP mode that leaves the /mcp_message endpoint unprotected, allowing unauthenticated attackers to perform privileged MCP actions—including writing and reloading nginx configuration and taking over the server. The flaw is under active exploitat…
US nationals behind DPRK IT worker 'laptop farm' sent to prison
Two U.S. nationals, Kejia Wang and Zhenxing Wang, were sentenced for aiding North Korean IT workers to pose as American residents and gain employment at more than 100 U.S. firms, including Fortune 500 companies. The pair helped generate over $5 million in illicit revenue for the DPRK and caused about $3 million in d…
Cisco says critical Webex Services flaw requires customer action
Cisco issues security updates patching four critical flaws in Webex Services, including CVE-2026-20184 in the SSO integration with Control Hub that could allow remote impersonation; affected customers must upload a new SAML certificate to their IdP in Control Hub to prevent service disruption. The release also fixes…
Hackers exploit Marimo flaw to deploy NKAbuse malware from Hugging Face
Hackers are exploiting the Marimo pre-auth RCE (CVE-2026-39987) to deploy a new NKAbuse variant via Hugging Face Spaces, using a dropper script and a kagent binary to gain persistence and remote command access; upgrade Marimo to 0.23.0+ or block the /terminal/ws endpoint to mitigate.
New Microsoft Defender "RedSun" zero-day PoC grants SYSTEM privileges
Security researcher Chaotic Eclipse has released a proof-of-concept for RedSun, a new Microsoft Defender zero-day that can grant SYSTEM privileges on Windows 10, Windows 11, and Windows Server 2019 and later—even on fully patched systems with Defender enabled. The PoC abuses Defender's Cloud Files API to overwrite a…
Signed Dragon Boss adware disables antivirus on 23,500 hosts via abandoned updater
Huntress found signed Dragon Boss adware pushing an AV-killing script with SYSTEM rights to 23,500+ hosts via update domains nobody had registered.
Microsoft pays $2.3M to researchers at Zero Day Quest cloud and AI hacking event
Microsoft paid $2.3M after nearly 700 Zero Day Quest submissions targeting its cloud and AI products. What the bug classes found mean for your own stack.
Microsoft: April updates trigger BitLocker key prompts on some servers
Microsoft has confirmed that the April 2026 security update (KB5082063) can trigger BitLocker recovery prompts on some Windows Server 2025 devices after restart. The issue affects a narrow set of enterprise configurations involving BitLocker on the OS drive, a PCR7-based TPM validation policy, and certain Secure Boo…
Microsoft fixes bug behind Windows Server 2025 automatic upgrades
Microsoft has fixed the bug that caused Windows Server 2019 and 2022 systems to unexpectedly upgrade to Windows Server 2025. The issue, tied to third‑party update tools and a Windows Update banner, was first acknowledged in September 2024; Microsoft says the upgrade offer is now re-enabled in Windows Update Settings…
Windows April 2026 updates add warnings for malicious .rdp files
Microsoft's April 2026 Windows updates warn before opening .rdp files, show the publisher and turn off drive and clipboard redirection by default.
Kraken says criminals are extorting it after a support insider accessed client data
Kraken says criminals threaten to leak videos of internal systems showing client data after a support employee's access was abused. Kraken refuses to pay.
108 Chrome Web Store extensions share one C2 to harvest identities and sessions
Socket found 108 Chrome extensions from five publishers sharing a C2 that collects Google identity data, steals Telegram sessions and strips security headers.
Fake Ledger Live app in Apple's Mac App Store tied to $9.5M in crypto theft
A counterfeit Ledger Live app on Apple's Mac App Store harvested seed phrases and drained about $9.5M from roughly 50 victims. What builders should learn.
Microsoft adds fast-track reinstatement after suspending WireGuard, VeraCrypt dev accounts
After suspending driver-signing accounts for WireGuard, VeraCrypt and others over identity checks, Microsoft added a temporary fast-track reinstatement path.
Five identity-first Zero Trust controls engineering teams can actually ship
A sponsored Specops piece argues Zero Trust should centre on identity. Here are the five controls it names, translated into concrete steps for dev teams.
European Gym giant Basic-Fit data breach affects 1 million members
Basic-Fit, Europe’s largest gym chain, disclosed a data breach affecting about 1 million members across the Netherlands, Belgium, Luxembourg, France, Spain, and Germany. Exposed information includes full names, addresses, emails, phone numbers, dates of birth, bank account details, and other membership data, though …
ShinyHunters leaks Rockstar analytics data taken via Anodot's Snowflake tokens
ShinyHunters leaked 78.6M Rockstar analytics records after using auth tokens stolen from SaaS vendor Anodot to reach Rockstar's Snowflake environment.
wolfSSL CVE-2026-5194: missing digest checks let forged certificates verify
wolfSSL 5.9.1 fixes critical CVE-2026-5194, where signature checks accepted undersized digests, plus 21 other CVEs. Who needs to upgrade and how to check.
Adobe patches exploited Acrobat Reader zero-day CVE-2026-34621 (APSB26-43)
Adobe's APSB26-43 fixes CVE-2026-34621, a prototype-pollution zero-day exploited via PDFs since December 2025. Fixed versions, mitigations and hunting tips.
Showing 20 of 485 articles