Please note Office visits are by appointment only. We support businesses with 10+ users or workstations, or with servers or cloud services to manage. No residential or walk-in computer repair. Book a time →

Author: Robert Timlick

  • PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure

    Threat actors have been observed attempting to exploit a recently disclosed security vulnerability in PraisonAI, an open-source multi-agent orchestration framework, within four hours of public disclosure.
    The vulnerability in question is CVE-2026-44338 (CVSS score: 7.3), a case of missing authentication that exposes sensitive endpoints to anyone, potentially allowing an attacker to invoke the
  • Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation

    Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation

    An anonymous cybersecurity researcher who disclosed three Microsoft Defender vulnerabilities has returned with two more zero-days involving a BitLocker bypass and a privilege escalation impacting Windows Collaborative Translation Framework (CTFMON).
    The security defects have been codenamed YellowKey and GreenPlasma, respectively, by the researcher, who goes by the online aliases Chaotic Eclipse
  • New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruption

    New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruption

    Details have emerged about a new variant of the recent Dirty Frag Linux local privilege escalation (LPE) vulnerability that allows local attackers to gain root access, making it the third such bug to be identified in the kernel within a span of two weeks.
    Codenamed Fragnesia, the security vulnerability is tracked as CVE-2026-46300 (CVSS score: 7.8) and is rooted in the Linux kernel’s XFRM
  • 18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

    18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

    Cybersecurity researchers have disclosed multiple security vulnerabilities impacting NGINX Plus and NGINX Open, including a critical flaw that remained undetected for 18 years.
    The vulnerability, discovered by depthfirst, is a heap buffer overflow issue impacting ngx_http_rewrite_module (CVE-2026-42945, CVSS v4 score: 9.2) that could allow an attacker to achieve remote code execution or cause a
  • Microsoft’s MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesday

    Microsoft’s MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesday

    Microsoft has unveiled a new multi-model artificial intelligence (AI)-driven system called MDASH to facilitate vulnerability discovery and remediation at scale, adding that it’s being tested by some customers as part of a limited private preview.
    MDASH, short for multi-model agentic scanning harness, is designed as a model-agnostic system that uses bespoke AI agents for different vulnerability
  • [Webinar] Why Your AppSec Tools Miss the “Lethal Path” (and How to Fix It)

    [Webinar] Why Your AppSec Tools Miss the “Lethal Path” (and How to Fix It)

    TL;DR: Stop chasing thousands of “toast” alerts. Join experts from Wiz and Okta/GitLab to learn how hackers connect tiny flaws to build a “Lethal Chain” to your data—and how to break it. Register for the Strategic Briefing Here.
    Most security tools work like a smoke alarm that goes off every time you burn a piece of toast. You get so many alerts that you eventually start to ignore them.
    The real
  • GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal Data

    GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal Data

    Cybersecurity researchers are calling attention to a new campaign dubbed GemStuffer that has targeted the RubyGems repository with more than 150 gems that use the registry as a data exfiltration channel rather than for malware distribution.
    “The packages do not appear designed for mass developer compromise,” Socket said. “Many have little or no download activity, and the payloads are repetitive,
  • Android Adds Intrusion Logging for Sophisticated Spyware Forensics

    Android Adds Intrusion Logging for Sophisticated Spyware Forensics

    Google on Tuesday unveiled a new opt-in Android feature called Intrusion Logging for storing forensic logs to better analyze sophisticated spyware attacks.
    Intrusion Logging, available as part of Advanced Protection Mode, enables “persistent and privacy-preserving forensics logging to allow for investigation of devices in the event of a suspected compromise,” the company said.
    The feature, it
  • New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

    New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

    Exim has released security updates to address a severe security issue affecting certain configurations that could enable memory corruption and potential code execution.
    Exim is an open-source Mail Transfer Agent (MTA) designed for Unix-like systems to receive, route, and deliver email.
    The vulnerability, tracked as CVE-2026-45185, aka Dead.Letter, has been described as a use-after-free
  • RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded

    RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded

    RubyGems, the standard package manager for the Ruby programming language, has temporarily paused account sign ups following what has been described as a “major malicious attack.”
    “We’re dealing with a major malicious attack on Ruby Gems right now,” Maciej Mensfeld, senior product manager for software supply chain security at Mend.io, said in a post on X. “Signups are paused for the time being.