VulnHub

SonicWall has released patches for a significant vulnerability in its SonicOS software, identified as CVE-2026-19868. This flaw allows attackers with credentials from different login methods to bypass SAML (Security Assertion Markup Language) checks, including those that enforce multi-factor authentication (MFA). This means that unauthorized users could potentially gain access to VPN logins, posing a serious security risk for organizations relying on SonicWall's VPN services. The issue is particularly concerning because it undermines the effectiveness of MFA, a key security measure. Users of SonicWall products are urged to apply the latest patches to secure their systems against potential exploitation.

A recent report from software security company Apiiro has revealed that sensitive information, including passwords and API keys, is publicly accessible in 1,122 GitHub repositories. This issue arises from a feature in Claude Code, Anthropic's AI coding assistant, where users can opt to save commands by selecting 'Yes, and don't ask again.' Unfortunately, this also saves any included secrets, making them visible to anyone browsing these public repositories. This exposes developers and organizations to potential security risks, as attackers can easily access these credentials to compromise systems. The incident highlights the need for developers to be cautious when using AI tools and to implement better practices for managing sensitive information.

SonicWall has issued security updates to address seven vulnerabilities in its SonicOS firewalls, one of which is a serious SSL-VPN authentication bypass flaw. This vulnerability has already been exploited in active attacks, putting users at risk of unauthorized access to their networks. Companies that use SonicWall firewalls should prioritize applying these updates to safeguard their systems. The affected products primarily include various versions of SonicWall's SonicOS, highlighting the need for prompt action from system administrators. As cyber threats continue to evolve, staying updated with security patches is crucial to maintaining network integrity.

Alpine Linux and OpenSSH have been found to contain a significant security vulnerability that requires immediate attention. This flaw could allow unauthorized access to systems running these software packages, posing a serious risk to users and organizations relying on them. The vulnerability affects various versions of Alpine Linux and OpenSSH, making it critical for administrators to patch their systems promptly. Failing to address this issue could lead to severe consequences, including data breaches and compromised systems. Users should prioritize applying the necessary updates to safeguard their environments.

The UK government is focusing on boosting its domestic artificial intelligence and cybersecurity sectors to lessen its dependence on American technology. This initiative comes in response to growing concerns among security leaders regarding the fragmentation of funding and whether it is arriving too late to make a significant impact. The aim is to enhance the UK's tech sovereignty and ensure that the nation can develop its own capabilities in the rapidly advancing fields of AI and cybersecurity. However, experts are questioning if the strategy will effectively address the challenges posed by existing reliance on foreign tech providers. As the UK moves forward, the success of these investments will be critical in shaping its future tech landscape.

Cybersecurity experts are facing a new threat from malicious security projects on GitHub that contain backdoor and information-stealing malware. These fake tools are designed to trick users into downloading and running them, potentially compromising sensitive data and systems. Researchers have identified that these infected projects are specifically targeting professionals in the cybersecurity field, which raises significant concerns about trust within the community. The implications are serious, as trusted platforms like GitHub are being exploited for distributing harmful software, making it crucial for developers and security personnel to scrutinize the tools they use. Users need to be vigilant and verify the authenticity of any security tools they consider downloading from GitHub.

Japan has announced an emergency cybersecurity package in response to a significant uptick in cyberattacks that have targeted numerous companies and government agencies. These attacks resulted in unauthorized access to systems and the leaking of sensitive client data, raising concerns about the security of information across the country. The government is taking swift action to bolster defenses and protect against future incidents. This move underscores the growing threats businesses and public institutions face in the digital landscape, emphasizing the need for enhanced cybersecurity measures. The situation serves as a wake-up call for organizations to prioritize their security protocols.

Authorities have charged three middle-aged men for allegedly using AI deepfake technology to impersonate CEOs and lawyers, defrauding businesses of $129 million. The attackers specifically targeted accounting departments, convincing employees to transfer large sums of money under false pretenses. This scheme raises significant concerns about the security measures in place for verifying identities in financial transactions. As AI technology becomes more sophisticated, businesses need to enhance their verification processes to prevent similar fraud. The incident serves as a stark reminder of the potential for AI tools to facilitate criminal activities, making it crucial for companies to stay vigilant against such tactics.

QNAP has issued a warning to users of its NAS devices regarding a security vulnerability known as Plex2Shell. Hackers are exploiting this vulnerability chain to gain unauthorized access to systems running the Plex Media Server. To mitigate this risk, QNAP is urging users to update their Plex Media Server software to the latest version available in the QNAP App Center. This incident affects users who rely on Plex for media streaming, as failure to update could leave their devices susceptible to attacks. It's crucial for users to take immediate action to protect their data and devices from potential breaches.

A newly discovered flaw in WordPress has raised concerns about the security of some websites during the update process. Umut Bayram, a researcher from Picus Security, revealed that while sites are installing the fix for this actively exploited vulnerability, they could still be at risk. The update process temporarily uses old, unpatched code, which could allow attackers to execute malicious code if they strike while the fix is being applied. To protect themselves, website administrators are advised to restrict web access during the update. This situation emphasizes the need for careful handling of updates to safeguard against potential breaches.

A newly disclosed security vulnerability in OpenSSH, identified as CVE-2026-123158 and dubbed SSHole, is being actively targeted by cybercriminals. This flaw affects Linux systems running OpenSSH with the musl C library and where Pluggable Authentication Modules (PAM) are disabled. The vulnerability allows unauthorized sign-ins to accounts that do not have passwords set, which poses a significant risk to users and organizations relying on this software. Researchers have reported that attackers are attempting to exploit this flaw within hours of its announcement, successfully gaining root access on a honeypot system. The urgency of addressing this vulnerability cannot be overstated, as it opens the door for potential intrusions and data breaches in affected environments.