IT-Security

The vulnerability is categorized as an Improper Access Control issue (CWE-284) and, under certain conditions, may allow unauthenticated attackers to create new editor profiles and ultimately upload and execute arbitrary PHP code …

On June 15, 2026, CISA added CVE-2026-54420 to its Known Exploited Vulnerabilities (KEV) Catalog, highlighting a vulnerability affecting the LiteSpeed cPanel plugin. While the issue may initially appear to be a relatively …

Remote access infrastructure continues to be one of the most attractive targets for threat actors, and for good reason. VPN gateways sit at the edge of the network, are typically exposed directly …

When defenders think about actively exploited vulnerabilities, attention often shifts toward newly disclosed zero-days and the latest high-profile attacks. Yet some of the most dangerous vulnerabilities today are neither new nor particularly …