CyberSecurity Archives – Page 6 of 6

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Jul 25, 2026 • CVE

Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a...

OpenOSINT — AI-Powered Intelligence Investigation Platform

Jul 25, 2026 • AI

Open-source intelligence (OSINT) has become an essential discipline for cybersecurity professionals, threat hunters, investigators, and researchers. While large language models can accelerate investigations, they...

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Jul 25, 2026 • CVE

Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on...

Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

Jul 24, 2026 • CyberSecurity

Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already exploiting. The release covers 622 of...

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

Jul 24, 2026 • CyberSecurity

Eight security flaws in NodeBB went public on Wednesday, along with the code to exploit them. Aikido Security rates all eight as high severity...

Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

Jul 24, 2026 • CyberSecurity

The threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware families, indicating that the operators are showing no signs of stopping despite extensive...

New HTTP/2 Vulnerability Lets Hackers Crash Servers With Memory Exhaustion Attacks

Jul 24, 2026 • CyberSecurity

A newly disclosed HTTP/2 denial-of-service vulnerability is raising concerns across the cybersecurity community after researchers confirmed that unauthenticated attackers can crash vulnerable servers by triggering memory...

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

Jul 24, 2026 • CyberSecurity

A Russian state-supported espionage group spent months reading Western mailboxes through a then-unknown flaw in Zimbra’s webmail client. The payload goes after the last...

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

OpenOSINT — AI-Powered Intelligence Investigation Platform

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

New HTTP/2 Vulnerability Lets Hackers Crash Servers With Memory Exhaustion Attacks

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

Get Tech & Security Briefings

Thank You for Subscribing!

Contact Us