Sunday , September 13 2026

Recent Posts

The first zero-click worm to spread through WeChat calls across iOS and Android

WeWorm

A worm called “WeWorm” can spread through WeChat voice calls on iOS and Android. It takes over a target’s WeChat account in seconds without the victim having to answer the call. Calif researchers said the bug was reported to Tencent in July. Tencent has fixed the issue for users, but …

Read More »

USA Bimbo Bakeries Confirms Data Stolen in Oracle EBS Zero-Day Attack

Bimbo Bakeries USA

Bimbo Bakeries USA has confirmed that hackers stole employee data by exploiting a zero-day vulnerability in Oracle’s E-Business Suite (EBS). In a letter dated August 31, 2026, and shared with the California Attorney General’s office on September 4, the bakery company explained that the issue started with a third-party vendor that …

Read More »

ALERT
Roundcube Webmail fixes 12 security flaws, including zero-click XSS and SSRF bypass

Roundcube Webmail has given security updates for its 1.6 LTS and 1.7 branches. These updates fix 12 problems that could let users and servers face cross-site scripting, email header issues, data access from other users, remote content tricks, and attacks that misuse server requests. The new versions, Roundcube 1.6.19 and …

Read More »