CVE & Exploits · 6d ago
Zero‑Click ‘SalesBleed’ Flaw Lets Attackers Drain Salesforce Data via Public Forms
Security researchers have uncovered a new vulnerability chain, dubbed “SalesBleed,” that targets Salesforce’s…
M
Mahesh Kumar Sahoo
Mahesh covers ransomware gangs, data leak sites, and dark web marketplaces, mapping how stolen data surfaces and gets sold. Follows ShinyHunters-style groups across leak forums.
252 stories filedFiled by Mahesh Kumar Sahoo
CVE & Exploits · 6d ago
Critical sudo flaw (CVE‑2026‑96512) lets local users sidestep time‑based sudo limits
A newly disclosed vulnerability identified as CVE‑2026‑96512 has been classified as high severity because it enables an…
Breaches · 6d ago
Crypto Casino Duelbits Shuts Down After $7 Million Hot‑Wallet Breach
Duelbits, an online gambling platform that accepts cryptocurrency, announced that a cyber‑attack on its hot wallets…
CVE & Exploits · 6d ago
Ethereum Bridge Hack Drains Payy Network Funds, Services Suspended
Payy Network announced that a malicious actor succeeded in exploiting a vulnerability in its Ethereum bridge contract,…
Threats · 6d ago
Cloudflare Patches Container Vulnerability That Exposed Residual Disk Data Between Tenants
Cloudflare announced on Thursday that it has remedied a security weakness in its serverless container platform that…
Ransomware · 6d ago
Armenian Cybercriminal Sentenced to Two Years in U.S. Prison After Ukraine Extradition
A U.S. federal judge sentenced Karen Vardanyan, a 35-year‑old Armenian national identified online as "Maneeken" and…
Threats · 6d ago
Legal Responsibility Unclear as Autonomous AI Systems Conduct Cyber Attacks
Recent reports of autonomous artificial intelligence systems conducting hacking operations have sparked a debate over…
Threats · 6d ago
SCOUTz Opens 30‑Day Beta, Offering Managed Service Providers Real‑Time Prospect Insight
Phoenix, Arizona — On September 24, 2026, the cybersecurity startup SCOUTz announced the launch of an open beta for its…
Threats · 6d ago
OnePlus 15’s OxygenOS Vulnerabilities Enable Permission‑Free Apps to Gain Root
A security researcher has uncovered a pair of flaws in the OnePlus 15’s OxygenOS that allow a seemingly harmless…
Threats · Sep 24, 2026
Enterprises Turn to SASE to Secure Edge‑Centric Operations
As more companies shift workloads to the edge, security leaders are re‑evaluating traditional perimeter defenses and…
CVE & Exploits · Sep 24, 2026
FedRAMP Tightens Cloud Security with Continuous Scans and Faster Fixes
The Federal Risk and Authorization Management Program (FedRAMP) announced new Vulnerability Disclosure Reporting (VDR)…
Threats · Sep 24, 2026
Prompt‑Injection Flaw Exposes Major Risks in $4 B Agentic AI Platform Manus
Security researchers have uncovered a prompt‑injection vulnerability in Manus, a high‑valued agentic AI application…