Servers, Cloud & Remote Access
Linux, VMware, Oracle, remote-support and cloud platforms: server flaws and what to patch this week.
Rosstat Cyberattack: Russia's Statistics Agency Is Still Restoring Systems, What Is Confirmed and What Businesses Should Check
Rosstat says it is still restoring systems after cyberattacks from October 29 to November 1, 2026. Hackers claim months of access and mass data theft, which Rosstat disputes and nobody has independently verified.
Ransomware Business Continuity: Why Backups Alone Won't Keep Your Company Running, and What to Do This Week
Backups can bring systems back, but they do not keep work moving during the outage. Here is what Japan's IPA learned from ransomware victims, what is not known, and what to check this week.
Sshole SSH Vulnerability (CVE-2026-123158): Exploit Attempts Hit Honeypots, Which Alpine Linux Servers Are Exposed, and the Fixed Versions to Install
An OpenSSH flaw called Sshole can let attackers skip the password on some Alpine Linux servers, and honeypots have logged exploit attempts. Here is what is confirmed and what to install.
ARTEX AI Hacking Tool: What the South Korean Bank Breaches Reveal About Exposed Systems, What Is Confirmed and What to Check This Week
An open-source AI hacking tool called ARTEX was used against South Korean banks through internet-facing systems. What is confirmed, what is still claimed, and what businesses should check this week.
AI Bot Traffic: Cloudflare Says AI Agents Are a Burden for Some Websites, and the Bot Settings to Check This Week
Cloudflare's CEO says some customers see AI agents as a bane to their business. Here is what is confirmed, what is still a claim, and the AI bot settings every website owner should check this week.
Crafty Falcon Fintech Attacks: CERT-In Warns AI-Assisted Hackers Hit Payment APIs on Weekends and Re-Attack Past Victims, and What to Check This Week
India's CERT-In says an AI-assisted group it calls Crafty Falcon gets in through exposed test systems, then uses fintechs' own payment APIs to move money. It times attacks for weekends and holidays. Here is what is confirmed and what to check.
Crafty Falcon AI Cyber Attacks: India's CERT-In Warns Fintech, Payment and Crypto Firms About AI Pentesting Tools, What Is Confirmed and What to Check
CERT-In has issued a critical advisory naming Crafty Falcon, a group it says uses AI pentesting tools against fintech, payment and crypto firms. Here is what is confirmed, what is not, and what to check this week.
GPT-6 Cyber Vulnerabilities: OpenAI's AI Finds 81 Firefox Flaws and 948 Linux Kernel Exploits, What Is Confirmed and What to Patch This Week
OpenAI says GPT-6 Cyber found 81 high-severity Firefox flaws and built root exploits for 948 Linux kernel bugs, most not yet fixed upstream. Here is what Mozilla confirms, what is still OpenAI's claim, and what to patch this week.
SonicWall SSLVPN Vulnerability CVE-2026-19868: Exploited Flaw May Let Attackers Get Past SAML and MFA, and the Fixed Versions to Install
CISA says attackers are exploiting CVE-2026-19868 in SonicWall SonicOS SSL VPN. The flaw may let a valid login for another sign-in method get past SAML and the MFA tied to it. SonicOS 7.3.4-7015 and 8.2.3-8015 list the fix.
