TechLogHub Blog — Page 9 of 25
Insights, guides, and product strategy for builders and product teams.
Reducing security operations complexity with Wazuh Cloud
The article explains how Wazuh Cloud reduces security operations complexity by offering a fully managed, cloud-native SIEM/XDR. It highlights modern SOC challenges—extended onboarding, ongoing maintenance, high alert volumes, scaling constraints, inflexible licensing, and reactive support—across hybrid environments.…
Check Point links VPN zero-day attacks to Qilin ransomware gang
Check Point has issued critical hotfixes for CVE-2026-50751 and CVE-2026-50752, fixing an authentication-bypass vulnerability in Remote Access VPN/Mobile Access deployments that used the deprecated IKEv1 protocol. Exploitation began May 7 and, by early June, impacted a handful of organizations worldwide with at leas…
Oxford University discloses data breach after careers platform hack
Oxford University has disclosed a data breach involving its CareerConnect platform after third‑party provider Group GTI was compromised. The incident, dated May 28, exposed users’ first names, last names, email addresses, and encrypted passwords for those not using Single Sign-On; affected passwords have been invali…
Over 20,000 Instagram accounts stolen in Meta AI support hack
Meta disclosed that more than 20,000 Instagram accounts were hijacked after attackers exploited a flaw in its AI-powered High Touch Support (HTS) account-recovery tool, enabling password resets without verifying email addresses or using two-factor authentication. The breach appears to have begun in mid-April 2026, w…
Hands on with Intelligent Terminal, an AI-powered Windows Terminal
Microsoft has released Intelligent Terminal, an open-source fork of Windows Terminal that embeds an AI assistant directly into the terminal. The AI pane runs alongside the normal shell and supports multiple agents (GitHub Copilot, Claude, Codex, Gemini), with optional automatic error detection and error suggestions.…
Critical Everest Forms Pro flaw exploited to take over WordPress sites
A critical vulnerability (CVE-2026-3300) in Everest Forms Pro for WordPress is being exploited to gain full control of sites, affecting versions up to 1.9.12 and enabling unauthenticated remote code execution via the Complex Calculation feature. A patch was released on March 18, 2026, but exploitation began by April…
Suspicious Polyfill login prompts pop up on Toshiba, Muji websites
Toshiba and Muji warned that suspicious sign-in prompts appearing on their websites, generated by the polyfill.io service, could be used to harvest credentials. Both companies suspended the service and advised users who saw the prompts to cancel and change passwords. The issue, linked to Polyfill’s historically comp…
Chinese APT deploys new malware to keep access to hacked networks
Chinese APT UNC5221 (VerdantBamboo) quietly maintained access to multiple networks for at least 18 months, compromising MSPs and then infiltrating Microsoft 365 using the Brickstorm backdoor. The group introduced new malware—Plenet (Grimbolt) for Synology NAS and AgentPSD as a fallback reverse shell—after breaching …
California Man Sentenced to More Than 26 Years for Fentanyl and Meth Trafficking on Nemesis Market (Dark Web)
California man Darren Hughes of San Jose was sentenced to over 26 years in federal prison for trafficking fentanyl and methamphetamine on Nemesis Market, a leading dark web marketplace. Prosecutors say he offered free meth samples and, in 2023, sold meth and fentanyl pills to an undercover agent for cryptocurrency; …
Cisco warns of unpatched SD-WAN zero-day exploited in attacks (CVE-2026-20245)
Cisco warns of a high-severity, unpatched zero-day in Catalyst SD-WAN Manager (CVE-2026-20245) that is actively exploited to escalate privileges to root across all deployment types. Exploitation requires netadmin privileges—typically via valid credentials or by chaining with CVE-2026-20182 or CVE-2026-20127—and can …
Credit card theft campaign abuses Stripe to host stolen payment info
Security researchers have uncovered a Magecart campaign that abuses Stripe's API and Google Tag Manager to host and exfiltrate stolen payment data from checkout pages. The attacker loads malicious code via GTM, captures card details (number, expiry, CVV), and stores them as fake Stripe customer records, with data ex…
DentaQuest Data Breach Exposes 2.6 Million Accounts
DentaQuest, one of the largest U.S. dental benefits administrators, confirmed a cybersecurity incident exposing data from 2.6 million accounts. The breach, linked to the ShinyHunters gang, leaked about 234 GB of information including email addresses, full names, phone numbers, government IDs, health-insurance data, …
UN food agency discloses breach affecting 600,000 Gaza households
The United Nations’ World Food Programme disclosed a cyberattack on its Gaza self-registration platform, potentially exposing the personal data of about 600,000 Palestinian households, including names, IDs, phone numbers, and registration locations. The platform is temporarily suspended as security measures are stre…
Microsoft Blames Caching Issue for Unexpected Windows Driver Updates
Microsoft fixed a misconfiguration in the Windows Update caching service that temporarily dropped device enrollment data, causing some Windows devices with auto-update restrictions to install driver updates without notice. The affected drivers were Microsoft-approved and posed no security risk. The issue reportedly …
French and Spanish Authorities Dismantle Fake ID Marketplace Used by Migrant Smugglers
French and Spanish authorities have dismantled an online marketplace selling forged identity and administrative documents to migrant-smuggling networks across the European Union. In Alicante, on May 27, a suspect was arrested and document-production equipment along with about 800 counterfeit European IDs were seized…
Chinese Hackers Use New Atlas RAT Malware in European Cyberattacks
TA4922, a Chinese-speaking cybercrime group, has expanded from East Asia into Europe, targeting Germany, Italy, the United Kingdom, and South Africa with the Atlas RAT and a broader set of loaders. The operation is financially motivated but shows potential for surveillance, delivering payloads via tailored phishing …
New HTTP/2 Bomb DoS Attack Crashes Web Servers in Under a Minute
A new DoS technique dubbed HTTP/2 Bomb can crash major web servers in seconds from a single machine by combining HPACK header compression amplification with HTTP/2 flow-control stalling (Slowloris-style). Discovered with OpenAI's Codex under Calif researchers, it can exhaust tens of gigabytes of RAM within seconds o…
CISA warns of active attacks exploiting Android, Linux bugs
CISA warns of active exploitation of two high-severity bugs: CVE-2025-48595 in Android (affecting Android 14–16; exploits require no user interaction; limited in-the-wild activity; patched in June 2026) and CVE-2022-0492 in the Linux kernel (cgroups v1; local privilege escalation and possible container escape; patch…
What 345 Days of Untested Exposure Looks Like at a Bank
Annual penetration testing creates a 345-day gap of unvalidated exposure in modern banks, a risk highlighted by recent breaches and threat reports. A real-world finding shows a vendor-hosted mortgage portal exposing tenant data through an unauthenticated API, enabling possible fraudulent loan submissions. Regulators…
Acer working to patch max severity zero-days in Wave 7 routers
Acer is patching two critical zero-day vulnerabilities in its Wave 7 mesh routers (firmware 1.01.000055 or earlier). CVE-2026-49200 could allow unauthenticated remote access to plaintext credentials stored in log archives via the acer_cgi.log file, while CVE-2026-49201 stems from a hardcoded AES key in upload.cgi th…
Showing 20 of 485 articles