critical CVE-2026-87899 Vulnerabilities

New cPanel Flaw Lets Hosting Accounts Gain Root Control of Shared Servers

cPanel patches CVE-2026-87899, a serious CalDAV/CardDAV flaw that allows an authenticated hosting account to execute code as root and potentially take full control of a shared server.

Zentrya One Desk 24 Sept 2026 3 min read

critical CVE-2026-94127 Vulnerabilities

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE

F5 patches CVE-2026-94127, a critical CVSS 9.8 BIG-IP APM zero-day actively exploited to achieve unauthenticated remote code execution on OAuth authorization servers.

Zentrya One Desk 24 Sept 2026 2 min read

critical CVE-2026-85046 & CVE-2026-87491 Vulnerabilities

Chinese Threat Actor Exploits Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

China-linked UTA0565 exploited Chrome and Windows zero-days through fake websites to deploy CLEANGULP, a new backdoor supporting commands, file theft and BOF execution.

Zentrya One Desk 24 Sept 2026 3 min read

critical CVE-2026-94545 Vulnerabilities

Critical Next.js ImageResponse Flaw Could Enable Server Code Execution

Critical Next.js vulnerability CVE-2026-94545, rated CVSS 9.5, could allow unauthenticated remote code execution through crafted input passed to Node.js ImageResponse.

Zentrya One Desk 24 Sept 2026 3 min read

Data Breaches

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

ShinyHunters claims it breached FBI systems and stole sensitive data on agents, employees and job applicants, while the FBI investigates unauthorized activity affecting FBIJobs.gov.

Zentrya One Desk 24 Sept 2026 3 min read

Vulnerabilities

Weekly Cybersecurity Recap: Cisco Zero-Day, AI Agent RCE, ClickFix Surge and Browser Hijacks

This week's cybersecurity recap covers an exploited Cisco ISE zero-day, AI-agent RCE risks, surging ClickFix attacks, ChainScript malware, browser hijacking and software supply-chain threats.

Zentrya One Desk 22 Sept 2026 4 min read

Malware

TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data

TASK#STOMP is a new PowerShell backdoor that steals business documents, Wi-Fi passwords and clipboard data while using scheduled tasks and dual C2 servers for persistent access.

Zentrya One Desk 22 Sept 2026 3 min read

Malware

ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure

Researchers uncover ChainScript, a Node.js RAT delivered through ClickFix lures that uses a Polygon smart contract to dynamically locate and rotate its WebSocket C2 infrastructure.

Zentrya One Desk 22 Sept 2026 3 min read

Malware

Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Steals Passwords

Researchers link Handala Hack to HEAVYGRAM, a Telegram-controlled Windows backdoor capable of stealing passwords, messages, screenshots and other sensitive data.

Zentrya One Desk 18 Sept 2026 3 min read