Build a prevention-first defense: The Sophos Cybersecurity Toolkit
Explore the Cybersecurity toolkit and start building your prevention-first strategy today.
Similar Posts
Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells
Bys sCybersecurity researchers have disclosed details of a “factory-shipped backdoor” implanted in at least 20 Chinese router models from Zbtlink. According to a new report from VulnCheck, the implant appears in all 21 firmware images currently available from Zbtlink that span more than 2 years. The backdoors are designed such that they start automatically and attempt…
NordVPN Hack Claim Firmly Refuted by NordVPN
Bys sThis has not been a great week for hackers whose claims have been refuted. First, ScatteredLapsus$Hunters’ claim about Resecurity was refuted, and now claims by another threat actor that NordVPN has been hacked have also been refuted. Davey Winder reports on the false NordVPN claims: The hacker, using the name of 1011, claimed to have brute-forced a……
OBSCURE#BAT Malware Uses Fake CAPTCHA Pages to Deploy Rootkit r77 and Evade Detection
Bys sA new malware campaign has been observed leveraging social engineering tactics to deliver an open-source rootkit called r77. The activity, condemned OBSCURE#BAT by Securonix, enables threat actors to establish persistence and evade detection on compromised systems. It’s currently not known who is behind the campaign. The rootkit “has the ability to cloak or mask any…
Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw
Bys sA maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitrary code execution. “VeloCloud Orchestrator (VCO) on-prem has a security issue where this…
Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads
Bys sRuby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application servers through crafted image uploads. Tracked as CVE-2026-66066 (CVSS score: 9.5), the flaw can expose the Rails process environment and secrets such as secret_key_base, the Rails master key, database passwords, cloud storage credentials,
CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog
Bys sThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical flaw impacting Mirasvit Cache Warmer, a popular Magento full-page cache extension, to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild. The vulnerability, tracked as CVE-2026-45247 (CVSS score: 9.8), is a case of deserialization of untrusted