InfoSecBulletin Cybersecurity for mankind

Fortinet has released an urgent fix after security experts disclosed a zero-day flaw in FortiClient EMS that is being used by hackers. CVE-2026-35616 is an Improper Access Control vulnerability [CWE-284] in FortiClient EMS may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests. Successful attacks do not …

A security alert from TP-Link has revealed several flaws—from CVE-2026-34118 to CVE-2026-34124— that impact the Tapo C520WS v2.6 outdoor security camera. CVSS v4.0 scores go up to 8.7. These flaws can let attackers on the same network get past security or shut down the device, making homes unsafe and unguarded. …

The EU’s cybersecurity agency said on Thursday that a recent hack and data leak at the EU was done by a cybercriminal group called TeamPCP. In a new report, CERT-EU said that hackers exfiltrated about 92 gigabytes of data from an Amazon Web Services (AWS) account linked to the European …