News & Sicurezza

BeyondTrust Remote Access Products 0-Day Vulnerability Allows Remote Code Execution BeyondTrust Remote Access Products 0-Day Vulnerability BeyondTrust has disclosed a critical pre-authentication remote code execution vulnerability affecting its Remote Support (RS) and Privileged Remo ... Read more Published Date: Feb 07, 2026 (2 days, 6 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-1731

Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability in the registration key input that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload of 1608 bytes to trigger a stack-based buffer overflow and execute commands through the registration key field.

Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious payload. Attackers can craft a specially designed payload to trigger remote code execution, demonstrating the ability to run system commands like launching the calculator.

Parallaxis Cuckoo Clock 5.0 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory registers in the alarm scheduling feature. Attackers can craft a malicious payload exceeding 260 bytes to overwrite EIP and EBP, enabling shellcode execution with potential remote code execution.

Cyberoam Authentication Client 2.1.2.7 contains a buffer overflow vulnerability that allows remote attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) memory. Attackers can craft a malicious input in the 'Cyberoam Server Address' field to trigger a bind TCP shell on port 1337 with system-level access.

A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing agents, retrieving public Trusted Platform Module (TPM) data, and deleting agents, by connecting without presenting a client certificate.

What CISA KEV Is and Isn’t – and a Tool to Help Guide Security Teams A new paper gives an insider’s perspective into CISA’s Known Exploited Vulnerability catalog – and also offers a free tool to help security teams use the CISA KEV catalog more effectively. The paper, ... Read more Published Date: Feb 06, 2026 (2 days, 19 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-25049 CVE-2022-21894

CISA Adds SmarterMail and React Native CLI Flaws to KEV Catalog February 6, 2026U.S. CISA has escalated two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, signaling active exploitation in the wild. CVE-2026-24423 in SmarterTools Sma ... Read more Published Date: Feb 06, 2026 (2 days, 17 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-24423 CVE-2025-11953 CVE-2025-24813

Autoriteit Persoonsgegevens en Raad voor de rechtspraak gehackt via Ivanti-lek Aanvallers zijn erin geslaagd de Ivanti EPMM-server van de Autoriteit Persoonsgegevens (AP) en Raad voor de rechtspraak te hacken. In het geval van de AP hebben de aanvallers toegang gekregen tot werk ... Read more Published Date: Feb 06, 2026 (2 days, 19 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-1340 CVE-2026-1281

Poland’s energy control systems were breached through exposed VPN access On 29 December 2025, coordinated cyberattacks unfolded across Poland’s critical infrastructure, targeting energy and industrial organizations. The attackers struck numerous wind and solar farms, a pri ... Read more Published Date: Feb 06, 2026 (2 days, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-24423 CVE-2025-59718

The Good, the Bad and the Ugly in Cybersecurity – Week 6 The Good | Former Google Engineer Steals AI Supercomputing Secrets for China Former Google software engineer Linwei Ding has been found guilty of economic espionage and trade secret theft after steali ... Read more Published Date: Feb 06, 2026 (2 days, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-25253

17% of 3rd-Party Add-Ons for OpenClaw Used in Crypto Theft and macOS Malware Bitdefender Labs reveals that 17% of OpenClaw AI skills analyzed in February 2026 are malicious. With over 160,000 stars on GitHub, OpenClaw is being exploited to steal crypto keys and install macOS m ... Read more Published Date: Feb 06, 2026 (2 days, 19 hours ago) Vulnerabilities has been mentioned in this article. CVE-2025-55182