InfoSecBulletin Cybersecurity for mankind

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has told U.S. federal agencies to secure their servers in four days. This is because of a serious weakness in the LiteSpeed cPanel user-end plugin that is being used in attacks. This vulnerability, called CVE-2026-48172, lets someone gain higher access due to …

A recent phishing attack aimed at FortiClient Endpoint Management Server (EMS) has used trusted admin systems to quietly install a new password thief on company devices. In May 2026, Arctic Wolf researchers found a group of bad actions using CVE-2026-35616, a flaw in FortiClient EMS that allows improper access. Attackers …

Anthropic has released a tool that acts like a careful assistant in your terminal. This new security plugin for Claude Code checks code as it’s being made or changed, pointing out common problems before they reach production. The plugin is already included in the Anthropic marketplace. It uses pattern matching …