Latest NEWS

Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs
A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel for managing Linux hosting servers, researchers at QiAnXin's XLab said this week.
The backdoored web server executes commands that attackers send via web requests, and those requests never appear in its access logs. Installing it takes root access, so the attackers must already control the server.
8 November 2026
From:
info@thehackernews.com (The Hacker News) [The Hacker News]

Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
Two flaws in Barracuda's Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, with no login required.
The company released patches on Monday, and the security firm watchTowr detailed the attack chain on Thursday.
One flaw, CVE-2026-116606, is an authorization bypass. An unauthenticated attacker can use it to restore a
8 November 2026
From:
info@thehackernews.com (The Hacker News) [The Hacker News]

MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT devices
We explain how Kaspersky Industrial CyberSecurity for Networks uses Machine Learning Event Processor (MLEP) technology to help take inventory of assets and detect anomalies in industrial networks.
8 November 2026
From:
Roman Ezhov, Andrey Lavrentyev [Securelist]

Oak Ridge labs gets hybrid quantum-HPC system to test qubit error correction
Co-design platform for quantum error correction melds IBM quantum kit with AMD CPUs and GPUs
8 November 2026
From:
Dan Robinson [www.theregister.com - Articles]

The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603
Kaspersky researchers analyze a complex fileless cyberattack by Storm-2603 involving ToolShell exploitation and subsequent runtime subversion, and discuss how to detect such intrusions.
8 November 2026
From:
Alexander Rodchenko, Rodrigo Wanderson [Securelist]

Operação de influência russa tem como alvo generalizado a América Latina
A operação, que contou com o uso de inteligência artificial, utilizou e-mails falsos, documentos governamentais falsificados e a criação de uma organização local para atacar escolas no Peru e no Equador, entre outras ações.
8 November 2026
From:
Robert Lemos [darkreading]

Millions of security cameras at risk: DoS vulnerability in Intelbras devices
During our research, we discovered a denial-of-service vulnerability that could affect millions of Intelbras IP camera systems built on the platform platform of a popular Chinese manufacturer.
8 November 2026
From:
João Victor [Securelist]


.jpg)


