eSecurityPlanet Staff

LibreOffice has patched a spreadsheet code execution flaw, while Apache OpenOffice remains vulnerable to attacks that bypass macro security warnings.

Progress patched four Telerik Fiddler Classic vulnerabilities, including a high-severity flaw that can enable local privilege escalation and unintended code execution.

Eight malicious npm packages tied to MALFEX logged more than 40,000 downloads while gaps in security advisories left some threats uncovered.

VulnCheck has observed exploitation of CVE-2026-61500, a critical Rejetto HFS flaw that can let unauthenticated attackers gain admin access and execute code.

Attackers are abusing Custom GPTs to lure Windows users into ClickFix malware chains that end in PowerShell execution and a remote access trojan.

Citrix patched CVE-2026-88779 after targeted attacks exploited the NetScaler SAML flaw to cause denial-of-service conditions.

Apple says AI agents can make Full Disk Access riskier on Macs, putting pressure on security teams to review permissions before new controls arrive.

Police seized KillSec’s infrastructure, arrested suspects, and tied the ransomware group to about 1,000 suspected attacks worldwide.

Cisco Talos linked UAT-11587 to an 11-month espionage campaign using Antino, cloud infrastructure, and Microsoft 365 C2 across Asia.

Weekly summary of Cybersecurity Insider newsletters in 2026

WatchGuard fixed CVE-2026-86131, a critical Fireware vulnerability that can give attacker-controlled VPN servers root access to connected Firebox appliances.

A Pentagon data breach exposed unencrypted PII tied to more than 3 million people after months of unauthorized access to a DMDC file-sharing system.