#CyberAlert

CVE-2026-5033: SQL Injection in code-projects Accounting System A vulnerability was detected in code-projects Accounting System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_costumer.php of the component Parameter Handler. The manipulation of the argument cos_id resul

1 week ago

MEDIUM severity: code-projects Accounting System 1.0 faces public SQL injection exploit in /view_costumer.php (cos_id). Monitor for threats & prepare to patch. Details: radar.offseq.com/threat/cve-2026-5033-sql... #OffSeq #SQLInjection #CyberAlert

0 0 0 0

CVE-2026-4851: CWE-502 Deserialization of Untrusted Data in CASIANO GRID::Machin CVE-2026-4851 is a critical deserialization vulnerability affecting CASIANO's GRID::Machine Perl module versions up to 0.127. GRID::Machine facilitates Remote Procedure Calls (RPC) over SSH, allowing a client to execute Perl code on remote

1 week ago

CRITICAL: CASIANO GRID::Machine ≤0.127 lets a compromised remote host run code on the client via unsafe Perl deserialization. Only connect to trusted hosts & review RPC usage. radar.offseq.com/threat/cve-2026-4851-cwe... #OffSeq #CyberAlert #Perl

0 0 0 0

The Daily Tech Feed

@thedailytechfeed.com

1 week ago

Critical Alert: Malicious code found in 'xz' compression tool (CVE-2024-3094) allows unauthorized remote access to Linux systems. Immediate action required! #LinuxSecurity #CVE20243094 #CyberAlert Link: thedailytechfeed.com/malicious-co...

1 0 0 0

Commonwealth Sentinel Cyber Security

@cwealthsentinel.bsky.social

1 week ago

Iran-linked hackers have breached FBI Director Kash Patel’s personal emails | CNN Politics Hackers connected to the Iranian government accessed FBI Director Kash Patel’s personal email and posted materials — including photos and documents — taken from his account, a person familiar with…

Iran-linked hackers have breached FBI Director Kash Patel’s personal emails | CNN Politics buff.ly/iqkzSNT

#cybernews #CyberSecurityNews #CyberAlert #CyberSecurityAlert

1 1 0 0

CVE-2026-24060: CWE-319 in Automated Logic WebCTRL Premium Server CVE-2026-24060 is a vulnerability classified under CWE-319 (Cleartext Transmission of Sensitive Information) affecting Automated Logic's WebCTRL Premium Server. The issue arises because service information transmitted over the network as BA

2 weeks ago

CRITICAL: WebCTRL Premium Server leaks BACnet data in cleartext (CVE-2026-24060). Attackers can intercept or tamper remotely. Segment networks & encrypt traffic until patched. radar.offseq.com/threat/cve-2026-24060-cw... #OffSeq #ICS #CyberAlert

0 0 0 0

Cyber FM

@cyberfm.bsky.social

2 weeks ago

WEDNESDAY | 18 MARCH 2026 | Cybersecurity Report

#CyberFM #CyberSecurity #InfoSec #DataBreach #HackingNews #TechUpdates #ChromeZeroDay #Ransomware #AriasThomas #RSSHDelivery #NYC #TechSafety #CyberAlert #2026

0 1 0 0

CVE-2026-28430: CWE-89: Improper Neutralization of Special Elements used in an S Chamilo LMS, a widely used open-source learning management system, suffers from a critical SQL injection vulnerability identified as CVE-2026-28430. This vulnerability exists in versions prior to 1.11.34 and is triggered via the custom_date

3 weeks ago

Chamilo LMS < 1.11.34 faces CRITICAL SQL injection (CVSS 9.3). Attackers can seize admin access & PII. Patch to 1.11.34 now! radar.offseq.com/threat/cve-2026-28430-cw... #OffSeq #SQLInjection #CyberAlert

0 1 0 0

Commonwealth Sentinel Cyber Security

@cwealthsentinel.bsky.social

3 weeks ago

Top 5 Cyber Security stories from last week (week of March 9–15, 2026) » Commonwealth Sentinel 1. 🔴 Google Chrome Zero-Days Patched Under Active Exploitation Google released emergency security updates to fix two high-severity Chrome vulnerabilities — CVE-2026-3909 (an out-of-bounds write in…

Top 5 Cyber Security stories from last week (week of March 9–15, 2026) » Commonwealth Sentinel buff.ly/dI5OaK9

#cybernews #CyberSecurityNews #CyberAlert #CyberSecurityAlert

0 0 0 0

3 weeks ago

Google Fixes Two Chrome Zero-Day Flaws
Read More: buff.ly/x4lz1W4

#ChromeZeroDay #GoogleSecurity #V8Engine #SkiaLibrary #ZeroDayExploit #BrowserSecurity #SecurityUpdate #CyberAlert

0 0 0 0

3 weeks ago

Apple Patches Coruna WebKit Exploit
Read More: buff.ly/zri5v26

#AppleSecurity #WebKitVulnerability #CorunaExploit #iOSSecurity #macOSSecurity #MemoryCorruption #SecurityPatch #CyberAlert

0 0 0 0

4 weeks ago

Microsoft Fixes 84 Flaws In March Update
Read More: buff.ly/SOKgkR7

#PatchTuesday #MicrosoftSecurity #ZeroDay #PrivilegeEscalation #WindowsSecurity #VulnerabilityManagement #SecurityUpdate #CyberAlert

0 0 0 0

CVE-2026-30861: CWE-78: Improper Neutralization of Special Elements used in an O Tencent WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Versions from 0.2.5 to before 0.2.10 contain a critical OS command injection vulnerability (CVE-2026-30861) due to improper neutral

1 month ago

CRITICAL: Tencent WeKnora (0.2.5 – 0.2.9) hit by unauth RCE via OS command injection. Upgrade to 0.2.10 ASAP or restrict access! radar.offseq.com/threat/cve-2026-30861-cw... #OffSeq #RCE #CyberAlert

0 0 0 0

CVE-2026-29789: CWE-862: Missing Authorization in vitodeploy vito The vulnerability identified as CVE-2026-29789 affects vitodeploy's vito application, a self-hosted web platform used for managing servers and deploying PHP applications. Prior to version 3.20.3, vito's workflow site-creation actions lack p

1 month ago

CRITICAL: vitodeploy vito <3.20.3 allows cross-project server control due to missing auth. Upgrade to 3.20.3+ and audit permissions ASAP! radar.offseq.com/threat/cve-2026-29789-cw... #OffSeq #CyberAlert

0 0 0 0

Wormable XMRig Campaign Leverages BYOVD Exploit And Time Based Logic Bomb - SCtoCS A wormable XMRig campaign is using a BYOVD exploit and a time based logic bomb to spread cryptomining malware and evade security defenses.

1 month ago

Coruna iOS Exploit Kit Targets iOS 13–17
Read More: buff.ly/tF3R9ts

#CorunaExploit #iOSSecurity #ExploitKit #MobileSecurity #ZeroDay #SpywareThreat #ThreatResearch #CyberAlert

0 0 0 0

Neha-June

@nehajune.bsky.social

1 month ago

The result? Your Slack history, API keys, and private files are laid bare—all without you ever clicking "Allow."
Read the full Alert : www.synergyit.com/openclaw-vul...

#AI #OpenClaw #InfoSec #AppSec #SynergyITUSA #DeveloperSecurity #CyberAlert #OpenSource #SecurityUpdate #2026Tech

2 0 0 0

SCtoCS

@sctocs.bsky.social

1 month ago

Wormable XMRig malware campaign uses BYOVD exploit and time-based logic bomb to spread and mine crypto — secure your systems and patch now 👇
👉 sctocs.com/wormable-xmr...

#Security #CyberAlert #Cryptomining

0 0 0 0

@auratechinsights.bsky.social

1 month ago

Grandstream VoIP Flaw Enables Eavesdropping
Read More: buff.ly/TSDAjK1

#Grandstream #VoIPSecurity #CVE20262329 #RootAccess #TelecomSecurity #CriticalVulnerability #PatchNow #CyberAlert

0 0 0 0

1 month ago

WhatsApp Hack Scam in Barabanki: How a Fake ‘Accident Photo’ Cost a Man INR 4.44 Cybercrime in India is evolving at an alarming pace. In a recent case from Barabanki, Uttar Pradesh, a young man lost INR 4.44 lakh within…

I just published WhatsApp Hack Scam in Barabanki: How a Fake ‘Accident Photo’ Cost a Man INR 4.44 medium.com/p/whatsapp-h...
.........
#WhatsAppScam #CyberCrime #OnlineFraud #APKScam #DigitalSafety #CyberSecurity #StaySafeOnline #TechAwareness #CyberAlert #ScamPrevention #IndiaNews #OnlineSafety

0 0 0 0

CVE-2026-26333: CWE-306 Missing Authentication for Critical Function in Calero V Calero VeraSMART versions prior to 2022 R1 contain a critical vulnerability (CVE-2026-26333) due to missing authentication on a .NET Remoting HTTP service exposed on TCP port 8001. This service publishes default ObjectURIs such as EndeavorS

1 month ago

Calero VeraSMART pre-2022 R1 hit by CRITICAL RCE flaw: unauthenticated attackers can exploit port 8001 for full server compromise. Restrict access & upgrade now. radar.offseq.com/threat/cve-2026-26333-cw... #OffSeq #CVE202626333 #CyberAlert

0 0 0 0

1 month ago

Windows 11 Notepad Lets Files Run Silently
Read More: buff.ly/auoMYC1

#Windows11 #NotepadVulnerability #RemoteCodeExecution #MicrosoftPatch #MarkdownExploit #ZeroDayRisk #AppSec #CyberAlert

0 0 0 0

@latestnewsofficial.bsky.social

1 month ago

Windows 10 KB5075912 Extended Update
Read More: buff.ly/d4hD58r

#Windows10 #KB5075912 #ZeroDay #PatchTuesday #MicrosoftSecurity #SecureBoot #VulnerabilityManagement #CyberAlert

0 0 0 0

Daily Trend Mirror

1 month ago

KKN Lombok Timur 13 Minutes 17 Seconds Viral Video KKN Lombok Timur 13 Minutes 17 Seconds Viral Video trends in Indonesia as police investigate leak claims, Ketua KKN controversy, and phishing link warnings.

KKN Lombok Timur 13 Minutes 17 Seconds Viral Video
#KKNLombokTimur #ViralVideo #IndonesiaNews #LombokTimur #CyberAlert #FactCheck #OnlineSafety #ITELaw #TrendingIndonesia #PoliceInvestigation
dailytrendmirror.com/viral/2026/0...

0 0 0 0

Daily Trend Mirror

@latestnewsofficial.bsky.social

1 month ago

Angel Nujhat 12 Minute Viral Video Link Angel Nujhat 12-Minute Viral Video trends online, but fact check confirms it is a cyber scam. Know how the fake leak spreads malware, phishing links, and betting app traps.

Angel Nujhat ‘12-Minute’ Viral Video Link Is a Cyber Scam, Not a Real Leak
#AngelNujhat #ViralVideoScam #CyberAlert #OnlineSafety #PhishingWarning #FakeLeak #ScamAlert #DigitalSecurity #FactCheck #TrendingNow
dailytrendmirror.com/viral/2026/0...

0 0 0 0

1 month ago

Germany Warns of Signal Phishing Attacks
Read More: buff.ly/ttVlquY

#SignalPhishing #AccountTakeover #SocialEngineering #SecureMessaging #GermanyCyber #TargetedAttacks #ThreatIntel #CyberAlert

0 0 0 0

Sequretek

@sequretek.bsky.social

2 months ago

🚨 #CyberAlert: Microsoft Copilot users are being targeted via prompt injection attacks. Phishing links can steal emails, files & tokens without extra clicks.
🔗 Check IoCs & secure your AI: www.sequretek.com/resources/th...

#CyberSecurity #AIsecurity

1 0 0 0