OnHex | Cybersecurity News

Последние публикации

• 🔴 A new Spectre v2 attack variant called BTR (Branch Target Reuse) has been discovered and reported, capable of recovering the root password hash on Intel systems running Linux within minutes. Modern processors have a f…

  12.10.2026 8 просмотров

• 🔴 Apple has patched a zero-day vulnerability tracked as CVE-2026-86950 that has been exploited in extremely sophisticated attacks. The vulnerability is an out-of-bounds write in CoreGraphics, the two-dimensional graphic…

  11.10.2026 15 просмотров

• 🔴 UpGuard researchers have published a report about misconfigured Supabase instances that expose sensitive information such as personally identifiable information, passwords, authentication tokens, and more. The open-so…

  11.10.2026 17 просмотров

• 🔴 SOCRadar has published a report about AI accounts being targeted by infostealer malware. The infostealer malware issue is nothing new, but previously these malware strains would only steal, say, login credentials for…

  10.10.2026 19 просмотров

• 🔴 If you're tired of hacking systems on Earth and are interested in hacking space systems, this week's Off By One Security stream is about exactly that. In this stream, they're going to talk about identifying, analyzing…

  09.10.2026 24 просмотров

• 🔴 Introducing the IDA Assist project: This project is an AI agent for reverse engineers, available as an add-on for IDA Home and Pro (version 9.4 sp1 and above). Its goal is to help security and malware analysts and rev…

  09.10.2026 18 просмотров

• 🔴 Security researcher Abdelhamid Naseri, known as Nightmare Eclipse, has once again released a zero-day exploit called BigDiskBuster that blocks Defender updates. This new zero-day is similar to UnDefend. Microsoft has…

  08.10.2026 21 просмотров

• 🔴 A CSRF vulnerability called Click2Shell has been identified in the Core component of WordPress and has been fixed in version 7.1.1. This vulnerability is a pre-authentication remote code execution chain that allows an…

  07.10.2026 24 просмотров

• 🔴 In 2025, the Clop ransomware group exploited the zero-day vulnerability CVE-2025-61882 to attack Oracle E-Business Suite servers. At that time, the extortion group Scattered Lapsus$ Hunters claimed that this exploit b…

  06.10.2026 28 просмотров

• 🔴 Cisco has patched a vulnerability with the ID CVE-2026-76460 in Identity Services Engine, which has a critical severity and allows a remote attacker to bypass authentication. The Cisco ISE product is a centralized pol…

  05.10.2026 28 просмотров