Uncategorized
Linux KSMBD RCE Flaws Disclosed Unpatched by Trend Micro ZDI
Trend Micro’s ZDI posted two unpatched CVSS 9.0 Linux KSMBD flaws to public kernel lists. Who is exposed and how to check.
Cyber Kendra — Cybersecurity & Tech News
CATEGORY
Latest Posts
Linux KSMBD RCE Flaws Disclosed Unpatched by Trend Micro ZDI
Trend Micro’s ZDI posted two unpatched CVSS 9.0 Linux KSMBD flaws to public kernel lists. Who is exposed…
Major Banks Detect Unauthorized AI Agents in Customer Accounts
US banks including Morgan Stanley and JPMorgan are finding unauthorized AI agents in customer accounts, some acting beyond…
eMudhra Quits Global TLS Certificate Business After 8 of its CA Keys Compromised
eMudhra is exiting global TLS after 8 CA keys, one literally the number 4, proved crackable. What happened,…
PHP2Shell Patch Bypass Claim Another RCE on PHP 8.5.12
A researcher claims RCE on fully patched PHP 8.5.12 — but the PHP2Shell bypass PoC is narrower than…
Top 7 Best Enterprise Agent IAM Platforms for Organisations Running Thousands of AI Agents in 2026
What happens when your AI agents start outnumbering your employees 144 to 1? You’ve got a serious identity…
BIND 9 Flaw CVE-2026-94300 Opens DNS Servers to RCE
CVE-2026-94300 in BIND 9 lets attackers corrupt memory via GSS-TSIG replay, risking DNS crashes and RCE. Patch to…
CVE-2026-91403: Oracle Java Emergency Fix for eMudhra CAs
Oracle’s CVE-2026-91403 alert stops Java SE and GraalVM trusting eight compromised eMudhra intermediate CA certificates.
Node.js Patches Brotli RCE Flaw, 9 Other Vulnerabilities
Node.js 26.12.1, 24.22.1 and 22.23.4 fix 10 flaws, including Brotli RCE bug CVE-2026-111497 and three TLS hostname bugs.
PHP2Shell: Critical PHP Flaws Allow Remote Code Execution
php2shell (CVE-2026-109618, CVE-2026-109619): critical unauthenticated RCE in PHP core. Patch out Oct 21. WordPress, Magento, Drupal affected.
PHP RCE Zero-Days CVE-2026-109618, CVE-2026-109619 Leak Early
CVE-2026-109618 and CVE-2026-109619: PHP will patch leaked critical flaws on October 21 at 14:00 UTC. Both are rated…
OneDrive Copilot Update: Hero Links, 1M Sync & New AI Tools
Microsoft’s OneDrive update adds Copilot reports and file organising, Hero Link sharing, 1M-item sync and an odsync admin…
Laravel Patches Critical Token Guard Auth Bypass
Laravel has disclosed a critical authentication bypass in its built-in token API guard that lets unauthenticated attackers log…
Handy Tech Tools
Quick browser-based utilities. Check IMEI numbers, create Wi-Fi QR codes, decode JWTs, generate hashes, run DNS lookups, and more without installing anything.