In the ever-evolving landscape of cybersecurity, several recent developments highlight the critical need for vigilance and proactive measures against emerging threats. This roundup focuses on significant vulnerabilities and exploits that have come to light, underscoring the importance of staying informed.<\/p>\n
<\/p>\n
A suspected advanced threat actor has been seen leveraging a security vulnerability in Fortinet FortiOS to deploy a new memory-resident ARM64 malware named PEERSTITCH. The exploitation targets CVE-2025-61624, a path traversal flaw that compromises tagged VPN sessions, allowing unauthorized access.Read more<\/a><\/p>\n A critical flaw in the Linux kernel, known as PwnEscape, has been disclosed, allowing code within a virtual machine to read the host memory. This vulnerability, tracked as CVE-2026-99999, was demonstrated against Vercel’s live cloud sandboxes, raising concerns about shared resources in cloud environments.Read more<\/a><\/p>\n Research from Citizen Lab reveals that Candiru spyware, attributed to an Israeli firm, infected devices at Al Jazeera through targeted online ads. This zero-click attack executed malicious code without user interaction, highlighting the evolving tactics of cyber espionage.Read more<\/a><\/p>\n The threat actor known as Silent Lynx has been linked to a series of attacks against government entities in the CIS region, utilizing a WinRAR flaw to deploy reverse shells. The attacks, spanning multiple infection methods, reveal a sophisticated approach to targeting sensitive organizations.Read more<\/a><\/p>\nPwnEscape Vulnerability in Linux Kernel<\/strong><\/h3>\n
Citizen Lab Traces Candiru Spyware to Al Jazeera<\/strong><\/h3>\n
Silent Lynx Targets CIS Government with WinRAR Exploits<\/strong><\/h3>\n
NGINX Addresses Multiple Vulnerabilities<\/strong><\/h3>\n