Juni Artawan

CISA Adds VMware Aria Operations Vulnerability CVE-2026-22719 to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a newly disclosed VMware Aria Operations vulnerability (CVE-2026-22719) to its Known Exploited Vulnerabilities (KEV) catalog after reports of active exploitation in the wild. The flaw…
Read more: CISA Adds VMware Aria Operations Vulnerability CVE-2026-22719 to KEV Catalog
Fake Laravel Packages on Packagist Install RAT Malware on Windows, macOS, and Linux

Cybersecurity researchers have discovered malicious Laravel packages on Packagist that secretly install a Remote Access Trojan (RAT) capable of infecting Windows, macOS, and Linux systems. These packages appear to be helpful Laravel utilities but are…
Read more: Fake Laravel Packages on Packagist Install RAT Malware on Windows, macOS, and Linux
Researchers Link CyberStrikeAI to Global FortiGate Hacks

Researchers have discovered that the threat actor behind a recent AI-assisted cyberattack targeting Fortinet FortiGate appliances used an open-source offensive security platform called CyberStrikeAI. According to Team Cymru, the attacker conducted automated mass scanning using…
Read more: Researchers Link CyberStrikeAI to Global FortiGate Hacks
How to Fix Remote Desktop Error: NTLM Authentication Being Blocked on Remote Computer

Yeah, you know sometimes you need to deal with legacy systems like old windows servers. And when you trying to connect using RDP, an error message telling you that NTLM auth being blocked on remote…
Read more: How to Fix Remote Desktop Error: NTLM Authentication Being Blocked on Remote Computer
Claude Code Vulnerabilities Enable RCE and API Key Theft

Security researchers have uncovered multiple high-risk vulnerabilities in Claude Code, the AI-powered coding assistant from Anthropic. The flaws could allow attackers to achieve remote code execution (RCE) and steal API credentials when developers open untrusted…
Read more: Claude Code Vulnerabilities Enable RCE and API Key Theft
Windows Admin Center Privilege Escalation Bug Fixed (CVE-2026-26119)

Microsoft has patched a high-severity vulnerability in Windows Admin Center that could allow attackers to escalate privileges over the network. The flaw, tracked as CVE-2026-26119, carries a CVSS score of 8.8 and affects environments running…
Read more: Windows Admin Center Privilege Escalation Bug Fixed (CVE-2026-26119)
Critical VS Code Extension Flaws Put 125M+ Installs at Risk

Security researchers have uncovered several high-severity vulnerabilities affecting four widely used extensions in Microsoft Visual Studio Code (VS Code). If exploited, these flaws could allow attackers to steal local files or execute remote code on…
Read more: Critical VS Code Extension Flaws Put 125M+ Installs at Risk
Malicious Chrome Extensions Targeting Business Data

Browser extensions are becoming a serious attack vector. Researchers recently exposed a malicious Chrome extension called CL Suite by @CLMasters that targets Meta Business Suite and Facebook Business Manager users. While it appears to be…
Read more: Malicious Chrome Extensions Targeting Business Data
How to Change Ubuntu Linux Hostname Without Restart

Changing the hostname in Ubuntu Linux is actually simple and does not always require a reboot. In most cases, you can update the hostname live without interrupting running services. This is especially useful for sysadmins…
Read more: How to Change Ubuntu Linux Hostname Without Restart
Active Exploitation of Critical BeyondTrust CVSS 9.9

Security researchers have confirmed active exploitation of a critical vulnerability affecting BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA). The flaw, tracked as CVE-2026-1731, carries a CVSS score of 9.9 and allows unauthenticated remote…
Read more: Active Exploitation of Critical BeyondTrust CVSS 9.9