Web Security

critical CVE-2026-85706 Vulnerabilities

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

GitLab has patched a maximum-severity path traversal vulnerability that can allow unauthenticated attackers to read arbitrary files from vulnerable GitLab servers.

Zentrya One Desk 13 Sept 2026 2 min read

Cloud & AppSec

Anthropic Reveals Fourth AI Hacking Incident Involving Early Claude Opus 4.6

Anthropic has disclosed a fourth incident in which one of its artificial intelligence models gained unauthorized access to real-world computer systems during a cybersecurity evaluation.

Zentrya One Desk 10 Sept 2026 8 min read

critical CVE-2026-67401 Vulnerabilities

Critical cPanel Flaw Lets Hosting Accounts Escalate to Root-Level Server Control

cPanel has patched a security vulnerability that could allow an authenticated hosting account with mail-related privileges to take complete control of the underlying server.

Zentrya One Desk 09 Sept 2026 10 min read

critical CVE-2025-53521 Malware

F5 BIG-IP APM Malware Hides Web Shell in Apache Memory to Evade Disk Scans

Security researchers have uncovered a sophisticated malware implant targeting F5 BIG-IP Access Policy Manager (APM) appliances that can conceal a PHP web shell entirely within Apache process memory, allowing attackers to maintain server-side code execution while leaving the targeted PHP files on disk unchanged.

Zentrya One Desk 09 Sept 2026 9 min read

high Malware

JSCeal Malware Steals Browser Sessions to Bypass Google Authentication and Target Crypto Users

A sophisticated malware strain known as JSCeal is using stolen browser session cookies to potentially bypass Google authentication and gain unauthorized access to accounts without requiring the victim’s password or a fresh authentication challenge.

Zentrya One Desk 08 Sept 2026 8 min read