A critical vulnerability in Nginx UI with Model Context Protocol (MCP) support is now being exploited in the wild for full ...

Attackers can abuse the near-maximum severity flaw in nginx-ui to restart, create, modify, and delete NGINX configuration ...

A critical Nginx UI vulnerability that allows attackers to take full control of servers has been exploited in the wild.

CVE-2026-33032 exposes nginx-ui to unauthenticated takeover via MCP endpoint, impacting 2,600+ instances with active ...

Attackers are currently exploiting a critical security vulnerability in Nginx. Instances in Germany are also threatened.

Its Mythos Preview model, which can allegedly find and exploit critical zero-days, also comes with certain controls, the ...

As hype builds around Anthropic’s offensive AI model, VulnCheck’s analysis finds just one confirmed CVE tied directly to ...

Anthropic has also said that the Mythos Preview found a now-patched 27-year-old bug in OpenBSD, a 16-year-old FFmpeg bug, and ...

Cookie-gated PHP webshells use obfuscation, php-fpm execution, and cron-based persistence to evade detection in Linux hosting environments. This post examines how this tradecraft conceals execution ...

A critical authentication bypass in nginx-ui, a widely used open-source web interface for managing nginx servers, has been ...

The vulnerability, with a CVSS score of 9.8, relates to the software’s support for Model Context Protocol (MCP) servers, ...

The Coruna exploit kit is an evolution of the framework used in the Operation Triangulation espionage campaign, which in 2023 targeted iPhones via zero-click iMessage exploits. The software has been ...