News & Sicurezza

Speed of Truth: X Trials “Collaborative Notes” to Supercharge Fact-Checking with Grok AI Since the acquisition of Twitter by Elon Musk and its subsequent transformation into X, Community Notes has emerged as the platform’s quintessential bulwark against misinformation and deceptive narrat ... Read more Published Date: Feb 09, 2026 (21 hours, 56 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-24858 CVE-2026-21509 CVE-2026-20045 CVE-2024-54143

Code Red: 4 Critical SandboxJS Flaws (CVSS 10.0) Allow Host Takeover A quartet of critical vulnerabilities has been discovered in SandboxJS, a library designed to isolate and secure JavaScript execution. The flaws, tracked as CVE-2026-25520, CVE-2026-25586, CVE-2026-25 ... Read more Published Date: Feb 09, 2026 (22 hours, 8 minutes ago) Vulnerabilities has been mentioned in this article.

The “All-in-One” Spy: DKnife Malware Hijacks Routers to Swap Downloads Functions of seven DKnife components | Image: Cisco Talos A powerful new cyber weapon has been discovered lurking in routers and edge devices, capable of monitoring traffic, hijacking downloads, and d ... Read more Published Date: Feb 09, 2026 (20 hours, 16 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-24858 CVE-2026-21509 CVE-2026-20045 CVE-2025-59287

“JackMa” & ShadowGuard: TGR-STA-1030 Spies on 37 Nations via Linux Rootkit Countries targeted by TGR-STA-1030 reconnaissance between November and December 2025 | Image: Unit 42 A massive, state-aligned cyber espionage campaign has quietly infiltrated government networks acro ... Read more Published Date: Feb 09, 2026 (18 hours, 22 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-1731 CVE-2026-24858 CVE-2026-21509 CVE-2026-20045 CVE-2024-56615 CVE-2024-56614 CVE-2023-39191 CVE-2022-23222

CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE BeyondTrust has issued a critical security alert for its popular remote access solutions, warning of a near-maximum severity vulnerability that could allow hackers to seize control of systems without ... Read more Published Date: Feb 09, 2026 (16 hours, 27 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-1731 CVE-2026-24858 CVE-2026-21509 CVE-2026-20045 CVE-2025-0217 CVE-2025-0889 CVE-2024-12356

CVE-2026-25526: Critical Jinjava Flaw (CVSS 9.8) Permits Remote Code Execution A massive hole has been found in the walls of Jinjava, the popular Java-based template engine used to power thousands of websites on the HubSpot CMS. Tracked as CVE-2026-25526, this critical vulnerabi ... Read more Published Date: Feb 09, 2026 (16 hours, 33 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-25526 CVE-2026-24858 CVE-2026-21509 CVE-2026-20045 CVE-2025-37729 CVE-2025-59340

A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /system/system/admins/assessments/pretest/questions-view.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

CVE ID : CVE-2026-2195 Published : Feb. 9, 2026, 12:15 a.m. | 3 hours, 3 minutes ago Description : A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /system/system/admins/assessments/pretest/questions-view.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2194 Published : Feb. 9, 2026, 12:15 a.m. | 3 hours, 3 minutes ago Description : A flaw has been found in D-Link DI-7100G C1 24.04.18D1. This affects the function start_proxy_client_email. Executing a manipulation can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2025-62878: Critical 10.0 Vulnerability Found in Kubernetes Local Path Provisioner A maximum-severity vulnerability has been uncovered in a core Kubernetes storage component, leaving nodes wide open to unauthorized file manipulation. The SUSE Rancher Security team has issued an urge ... Read more Published Date: Feb 09, 2026 (16 hours, 44 minutes ago) Vulnerabilities has been mentioned in this article.

APT28 Weaponizes Office Flaw to Spy on NATO & Military The notorious Russian state-sponsored group APT28 (also known as Fancy Bear) has launched a sophisticated new espionage campaign, striking European military and government targets within just 24 hours ... Read more Published Date: Feb 09, 2026 (16 hours, 48 minutes ago) Vulnerabilities has been mentioned in this article.

A security vulnerability has been detected in Tenda AC9 15.03.06.42_multi. Affected by this vulnerability is the function formGetRebootTimer. Such manipulation of the argument sys.schedulereboot.start_time/sys.schedulereboot.end_time leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.