A critical server-side template injection (SSTI) vulnerability in FOSSBilling, tracked as CVE-2026-28496, was disclosed on June 23, 2026. This flaw affects all versions up to 0.7.2 and allows attackers to exploit unsafe…
Water and wastewater systems are increasingly targeted by Russia, China, and Iran due to poor operational technology defenses. Exposed human-machine interfaces and programmable logic controllers create vulnerabilities…
The newly identified KuinaExtractor infostealer, written in Rust, has been evolving for over six months and poses a significant threat to users across various platforms. It targets sensitive data, including browser…