Security & privacy By Ren
Know what changed. Know what matters.
Understand the security and privacy stories behind the headlines, without jargon or fear-driven noise.
Explore the coverage
Find a story by topic or search the full archive.
Oracle PeopleSoft Zero‑Day CVE‑2026‑35273 Re‑Exploited
A previously known zero‑day flaw in Oracle’s PeopleSoft software has resurged and is actively exploited against legacy systems.
Read storyJADEPUFFER Attackers Delete Azure Resources via Compromised Service Principals
Attackers used compromised service principals to delete Azure resources for ~18 hours.
Read storyLunex Stealer Uses AMD Driver to Disable Monitoring and Steals Credentials
A new Lunex variant hijacks an AMD kernel driver to elevate privileges, disable security monitoring, and harvest browser passwords via fake CAPTCHAs on Ukrainian sites.
Read storyCitrix NetScaler Zero‑Days Under Active Exploitation
Two unpatched Citrix NetScaler RCE bugs are currently being used in the wild.
Read storyData Broker Breaches Cost US Consumers Over $20 Billion
FTC and congressional reports reveal data‑broker breaches costing U.S. consumers over $20 billion.
Read storySharePoint & MikroTik Flaws Added to U.S. KEV Catalog
CISA lists new Microsoft SharePoint and MikroTik RouterOS vulnerabilities as actively exploited worldwide.
Read storyGitHub Actions Re‑Enabled, Running Mini Shai‑Hulud Malware
Two previously disabled GitHub actions were reactivated last week and now execute Mini Shai‑Hulud malware, affecting many open‑source projects.
Read storyRoundcube SQL Injection Flaw Actively Exploited Worldwide
A pre‑authentication SQL injection in Roundcube Webmail’s virtuser_query plugin has enabled attackers to read and modify database content across affected installations.
Read storyOnePlus 15 Devices Vulnerable to Root Exploit via Unprivileged Apps
A researcher showed a malicious app could grant full root control on OnePlus 15 phones without requesting special permissions.
Read storyCorp MDM Spyware Hits Logistics Firms via Fake Google Play Apps
The Corp MDM Android spyware targets logistics firms with fake Google Play listings that appear legitimate.
Read storyHashiCorp Registry Hosts Malicious Terraform Providers Delivering Go Malware
Researchers uncovered Go malware hidden in Terraform providers on HashiCorp’s registry, marking the first supply‑chain attack through this central repo.
Read storyF5 BIG‑IP APM Zero‑Day Lets Attackers Run Code Without Logging In
F5’s BIG‑IP APM flaw allows unauthenticated remote code execution on OAuth servers.
Read story