A VulnCheck canary has caught the first live exploitation of CVE-2026-58115, an unauthenticated Node-RED admin API flaw.

Node-RED, a flow-based programming tool widely used in industrial control systems, is currently being targeted by unknown criminals exploiting a maximum-severity vulnerability to deploy malicious ...

Attackers are exploiting an authentication flaw (CVE-2026-58115) in Node-RED, a programming tool built into some industrial control products, to install a Linux bot and backdoors on unprotected ...

Infosec’s chatterati have their knickers in a tight twist (that’s ‘panties in a bunch’, for our American friends) over yet another celebrity CVE that may or may not be deeply worrying. We are ...

A curated, searchable index of hands-on CTF labs covering Linux fundamentals, file system forensics, privilege escalation to root, secure shell scripting, network troubleshooting, firewall policies, ...

Korbin is a Linux system administrator who spends most of his time in a terminal figuring out how things actually work. Over ...

Ubuntu has put early kernel fixes for CVE-2026-98432 in its -proposed pocket for 22.04 LTS and newer releases. The bug is a serious Linux kernel flaw that can let a remote user run commands as root ...

Ubuntu had not shipped a patched kernel for CVE-2026-98432 by Monday afternoon. The flaw can let a remote attacker run code on a server, and AWS and Red Hat say the workarounds available until a fix ...

Unknown criminals are exploiting a maximum-severity vulnerability in Node-RED, a flow-based programming tool that is widely used in critical infrastructure, to deploy a flow that downloads and runs a ...

The startup co-founded by systemd creator Poettering previews Linux that uses TPM-signed measurements to verify a server’s boot chain and configuration.

Government and state-affiliated Linux infrastructure was targeted in a cyber espionage campaign that combined custom malware, web shells and suspected ...

CL-UNK-1211 targets government Linux servers using AI-assisted scripts, PHP web shells, and SysGoRAT to steal credentials and ...