Vulnerability (CVE)
Google, working with the FBI, Lumen and other partners, took action against the NetNut residential proxy network, also known as Popa, disabling Google accounts and services used for malware command-and-control and updating Google Play Protect to block apps...
Sysdig observed threat actors attempting to exploit CVE-2026-20896, a critical 9.8-severity flaw in Gitea Docker images that hard-code REVERSE_PROXY_TRUSTED_PROXIES to a wildcard, letting any client reaching the container's HTTP port send an X-WEBAUTH-USER...
An unauthenticated attacker can read any file the Gitea service account can access in versions 1.22.1 through 1.27.0 using only a public repository and crafted Org-mode markup, with no login or write access required; the flaw is tracked as CVE-2026-59774,...