Tag: cybersecurity research

CISA Adds SonicWall SonicOS MFA Bypass Vulnerability To KEV Catalog

Risk & ResilienceNovember 9, 2026

CISA has added CVE-2026-19868 to its Known Exploited Vulnerabilities catalog after reports of potential exploitation targeting SonicWall SonicOS SSL-VPN.

Researchers Reveal Connected Car Account Takeover Risks At Two Automakers

Risk & ResilienceNovember 9, 2026

Security researchers found misconfigured ForgeRock identity systems that exposed customer accounts and connected-car controls at two unnamed automakers.

Study Of 281 Free Android VPN Apps Reveals Traffic Leaks, Unencrypted Data, And User Tracking Risks

Risk & ResilienceJuly 12, 2026

Researchers have found significant privacy and security issues in 281 popular free Android VPN applications, including traffic leaks, unencrypted communications, and extensive user tracking.

Study Of 281 Free Android VPN Apps Reveals Traffic Leaks, Unencrypted Connections, And Extensive User Tracking

Risk & ResilienceJuly 11, 2026

Researchers found serious privacy and security issues in 281 popular free Android VPN apps, including traffic leaks, unencrypted data transmissions, user tracking, and weak encryption practices affecting billions of installations.

Researchers Examine BYOVD Risks Through Vulnerable Windows Drivers Without Hardware Dependencies

Risk & ResilienceMay 23, 2026

New cybersecurity research highlights how vulnerable Windows kernel mode drivers may remain exploitable without dedicated hardware, raising concerns around BYOVD attacks and endpoint security risks.

OpenClaw AI Agent Security Flaws Raise Prompt Injection And Data Exfiltration Concerns

Risk & ResilienceMarch 16, 2026

China’s CNCERT warns that OpenClaw AI agent security weaknesses could enable prompt injection attacks, endpoint compromise, and sensitive data exfiltration.

GlassWorm Supply Chain Campaign Targets Developers Through Malicious Open VSX Extensions

Risk & ResilienceMarch 16, 2026

Security researchers report an expanded GlassWorm campaign using malicious Open VSX extensions and hidden Unicode code to target developers and steal sensitive data.

Researchers Use Machine Learning to Detect Hidden Vault Apps on Smartphones

WiredJune 28, 2025

Researchers from ECU and University of Southern Queensland develop a machine learning method to identify hidden vault apps on smartphones, aiding law enforcement in digital investigations.