Category: ➽Vulnerabilities Exploits
-
Windows 11 Notepad flaw: 6 risks from Markdown links
The Windows 11 Notepad flaw has raised serious security concerns after researchers revealed that specially crafted Markdown links could silently execute local files without clear user warnings. The issue, reported by multiple security outlets in early 2026, affects Microsoft’s modernized Notepad app, which recently added Markdown support to improve usability. While the feature was designed…
-
Flair Airlines Vulnerabilities: IDOR Flaw Exposes Pilot Data
Flair Airlines vulnerabilities have come under scrutiny after a dark forum disclosure detailed an alleged critical flaw affecting the airline’s pilot recruitment platform. According to a post published on Darkforums.st on 05 February 2026 by an author using the alias “GordonFreeman,” a severe Insecure Direct Object Reference issue enabled unauthorized access to sensitive candidate data.…
-
GlassWorm attack: 7 urgent facts on the macOS OpenVSX hack
GlassWorm attack investigations have revealed a stealthy macOS-focused campaign abusing compromised OpenVSX extensions to infiltrate developer environments. Security researchers warn that this supply chain operation targets trust in open-source ecosystems, silently delivering malicious code through tools developers use daily. 😨 By weaponizing popular VS Code add-ons, attackers bypass traditional defenses and gain persistent access to…
-
LENA Health Breach: 7 Urgent Impacts of the Data Leak
The LENA Health breach has rapidly become one of the most alarming healthcare cybersecurity incidents of early 2026. First published on Darkforums.st by the author FulcrumSec on January 26, 2026, the leak alleges a massive exposure of sensitive medical and operational data belonging to thousands of patients. According to the claims, deeply personal information, unencrypted…
-
eScan Server Breach 2026: Urgent Cyber Impact
eScan update server breach incidents in 2026 have triggered widespread alarm across the global cybersecurity community, highlighting a growing and deeply troubling trend: attackers increasingly compromise trusted software update infrastructure to distribute malicious payloads at scale 😨. In this case, MicroWorld Technologies, the developer behind the widely deployed eScan antivirus platform, confirmed that its update…
-
Microsoft Patches Office Zero-Day: CVE-2026-21509 Guide
Microsoft patches Office zero-day vulnerabilities in an urgent security update after researchers confirmed active exploitation in the wild, exposing millions of users to severe cyber risk. The vulnerability, tracked as CVE-2026-21509, allows attackers to bypass critical security features designed to block unsafe COM and OLE controls, a long-favored attack vector for malware delivery and advanced…
-
Hackers Breach Fortinet FortiGate: Firewall Leak Impact
Hackers breach Fortinet FortiGate devices in a highly sophisticated cyberattack that resulted in the theft of sensitive firewall configuration files, shaking the global cybersecurity landscape. This alarming incident highlights how even enterprise-grade security solutions can become prime targets when threat actors identify exploitable weaknesses. Firewall configurations contain detailed network blueprints, authentication methods, routing rules, and…
-
CISA Known Exploited Vulnerabilities: 4 Urgent Risks
CISA Known Exploited Vulnerabilities updates have become a critical alert mechanism for organizations worldwide, and the latest addition of four actively exploited flaws significantly raises the urgency for immediate remediation. On January 22, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) confirmed that four newly discovered vulnerabilities were added to its Known Exploited Vulnerabilities (KEV)…
-
WordPress Plugin Vulnerability: Modular DS Flaw Exploited
WordPress plugin vulnerability incidents continue to escalate, and the latest actively exploited flaw in the Modular DS plugin highlights how quickly attackers can gain full control over vulnerable websites. In January 2026, security researchers confirmed that a critical WordPress plugin vulnerability affecting the Modular DS plugin was being abused in the wild to obtain administrator-level…
-
Korean Air data breach revealed: Key facts about employee exposure
The Korean Air data breach has raised urgent concerns across the aviation and cybersecurity sectors after reports confirmed that sensitive employee information was exposed through a third-party compromise. According to multiple security disclosures, the incident affected thousands of workers and stemmed from vulnerabilities tied to an external service provider rather than Korean Air’s core systems.…