Resolved: Discord – Server Unavailability
Discord: Server Unavailability. The incident has been resolved.
Category Cybersecurity
News about cyberattacks, vulnerabilities, zero-day flaws, ransomware, malware, data breaches, security updates, and IT system protection.
Attacker Accessed Dropbox Accounts Through a Lenovo ID Issue
Dropbox warned some users about unauthorized access to their accounts. The attacker reportedly exploited Lenovo ID email verification to sign in without knowing the Dropbox password.
SonicWall Fixes Two Actively Exploited SMA1000 Vulnerabilities
SonicWall has released fixes for two vulnerabilities in SMA1000 devices, confirming that they are being actively exploited in the wild. Affected organizations should update their systems and check for possible signs of compromise.
Microsoft Defender Safe Links mistakenly blocks legitimate Google Search links
Microsoft is addressing incident MO1465962, in which Safe Links in Defender for Office 365 is flagging legitimate URLs from Google Search as malicious.
Chrome 152 and Firefox 155 Fix Dozens of Security Flaws
Google and Mozilla released Chrome 152 and Firefox 155 updates. They fix critical and high-severity flaws, including memory safety, sandbox, and permission issues.
GeoNetwork Fixes Vulnerability Chain Enabling Remote Command Execution
The GeoNetwork project published security advisories for unauthenticated formatter uploads and a flaw in Saxon XSLT. Versions 4.4.12 and 4.2.17 also address CVE-2026-58400, rated CVSS 9.1.
U.S. Unseal Indictment Against Russian Citizen in Freelance Platform Phishing Case
The U.S. has unsealed an indictment against Searzhudin Aktulajev. Prosecutors allege he was involved in a campaign involving malicious Excel attachments sent to users of an unnamed freelance platform.
Claude Code Exploit Ported an Older Flaw Between WAGO PLCs in a Lab
According to two reports, researchers used Claude Code to adapt an existing exploit for the older CVE-2021-31886 vulnerability from one WAGO PLC to a related model. This was neither a new vulnerability nor a confirmed attack in operation.
International Operation Disrupts Sality P2P Botnet, but Infected Devices Remain a Risk
The USA and European partners took action against the Sality P2P botnet. Sinkholing is intended to block the delivery of new malicious payloads, but it does not remove existing infections.
Google Renames Android Ready SE as Android Digital Credential Alliance
Google is expanding the Android Ready SE initiative under the new name Android Digital Credential Alliance. It has also released a technical paper on using StrongBox for highly secure digital credentials.