Security news.
Today's cybersecurity landscape is marked by widespread active exploitation and critical vulnerabilities across various platforms, often leveraged by sophisticated threat actors using AI. Organizations are urged to prioritize patching, enhance supply chain security, and bolster defenses against novel AI-driven attack techniques.
Hackers Poison Rust Crate 'arrayref' to Distribute Infostealer
Attackers compromised a widely used Rust crate maintainer account to inject malware that executes during compilation on developers' systems.
N-able Passportal Bug Exposes Password Vault Master Keys
A vulnerability in N-able's "Passportal" password manager, popular with MSPs and SMBs, reportedly exposes master keys, posing risks even after patching due to its cloud-based design.
AI-Generated Exploit Scripts Target Siemens S7 PLCs in US Critical Infrastructure
The U.S. government has warned of an active threat targeting critical infrastructure with AI-generated exploit scripts disguised as legitimate monitoring tools, specifically against Siemens S7 Series PLCs.
Hackers Actively Exploiting Critical Zimbra Collaboration Vulnerability
CERT Polska has observed active exploitation of CVE-2026-73570, a command injection flaw in Zimbra Collaboration Suite (ZCS) that can lead to remote code execution.
Critical Elementor Pro Bug Exposes WordPress Sites to RCE Attacks
A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload executable files, leading to remote code execution on the server.
Atlassian, Splunk Patch Dozens of Critical, High-Severity Vulnerabilities
Both Atlassian and Splunk have released patches for numerous critical and high-severity vulnerabilities that could enable arbitrary code execution, sensitive information access, and privilege escalation.
CISA Adds Two TrueConf Server Vulnerabilities to KEV Catalog
CISA has added CVE-2026-72529 (Missing Authentication for Critical Function) and CVE-2026-72530 (Code Injection) affecting TrueConf Server to its Known Exploited Vulnerabilities Catalog, urging immediate action.
Exploitation Expected for Critical Authentication Bypass in Citrix NetScaler
Citrix has patched a critical authentication bypass vulnerability impacting NetScaler ADC and NetScaler Gateway, with unauthenticated remote exploitation expected.