Security news.
Today's security landscape is dominated by active zero-day exploitation and critical infrastructure vulnerabilities. Threat actors are rapidly weaponizing newly disclosed flaws against enterprise edge appliances and web servers, while several high-severity remote code execution bugs require urgent patch deployment across container registries, application delivery controllers, and core web services.
N-able N-central Zero-Day Exploited in the Wild
Threat actors are actively exploiting a newly disclosed vulnerability dubbed "4EverAble2Shell" to compromise servers and deploy cryptocurrency miners, impacting even fully updated deployments.
Apache Patches Critical HTTP/2 Remote Code Execution Flaw
The Apache HTTP Server project resolved CVE-2026-119618, a race condition in the mod_http2 module that allows unauthenticated remote attackers to execute arbitrary code.
SignDrop Zero-Day Grants Local SYSTEM Access on Windows
A newly released public proof-of-concept exploit abuses path redirection in the Windows Common Log File System (clfs.sys) driver to escalate local user privileges to SYSTEM.
Critical Flaw in Red Hat Quay Exposes Private Container Images
A severe authorization vulnerability in Red Hat Quay registries allows attackers to view, read, and overwrite private container images across all repositories.
Citrix Fixes 12 Vulnerabilities in NetScaler ADC and Gateway
Citrix issued security advisories for critical flaws, including a memory overflow bug (CVE-2026-120868) with a 9.3 CVSS score that can lead to authentication bypass and denial-of-service conditions.
Global Law Enforcement Dismantles Major Malware Infrastructure
Europol and international partners seized hundreds of servers and domains powering the distribution of the Gootloader, CastleRAT, and StealC malware ecosystems.
Check Point Warns of PHP2Shell Exploits on Security Gateways
Attackers are actively targeting vulnerable Mobile Access portals on Check Point Security Gateways using exploits derived from the recently disclosed PHP2Shell flaws.