Cybersecurity news from across the internet
Cybersecurity news from across the internet
MR ROBOT Android malware rents banking trojans that steal one-time passwords and card data





[0day-rubbish] NETGEAR RAX120 V1.2.5.18 authenticated SOAP InstallApp OS command injection to root-configured web-stack execution (6.8 Medium; conditionally 7.2 High with management exposure)
[0day-rubbish] Raritan PX3 PDU G4 firmware 4.3.14 command injection in the ping and traceroute diagnostics through an inverted hostname-validation return check (8.8)
[0day-rubbish] NUUO Crystal Server 3.19.0.85 unauthenticated upload.php PHP web-root write with fastcgi execution into server-side code execution as the web service account (9.8 Critical)
Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)
ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)
Yet Another ClickFix Campaign, (Wed, Oct 28th)
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Banks are blocking AI agents from customer accounts
FTC Launches Personalized Pricing and Compensation Inquiry
Chrome and Firefox updates fix serious security flaws. Install them now
Attackers Abuse Legitimate Infrastructure to Distribute Phishing Emails
[0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 scenario ping condition command injection through the auto-executing ping thread (7.2)