Cybersecurity

I Found a Pre-Auth Captive-Portal Bypass in Zyxel Enterprise APs. Here's How I Emulated the Firmware for CVE-2026-8508

I found this while reversing Zyxel's WAX650S firmware and following the guest Wi-Fi social-login pat…

WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android

Meta on Tuesday announced a set of WhatsApp account security features, including support for multipl…

WhatsApp adds stronger two-step verification, multiple passkeys

WhatsApp has started rolling out several new account security features, including support for multip…

Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode

Marimo has addressed a high-severity security flaw in its notebook software that allowed an attacker…

Created a TryHackMe-ish HTB badge creator

submitted by /u/wcon [link] [comments]…

Hackers breached over 270 Zimbra servers in ongoing attacks

Threat actors have already compromised over 270 Zimbra instances in remote code execution attacks ta…

Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows

Thousands of companies have been affected by the Mirage2FA campaign from 2024 to 2026. The commercia…

24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages

Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm pac…

E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands

Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead d…

Frontier AI: Vulnerability Management's Systemic Revolution

Vulnerability management has been a staple of security programs since the dawn of the cybersecurity …

Police arrests dozens of suspects in global cybercrime crackdown

Law enforcement agencies from 22 countries helped identify 263 suspects and arrested 58 individuals …

HACKERS : Kate Libby aka Acid Burn Laptop Reproduction mod

submitted by /u/realKevinNash [link] [comments]…