Security – Page 4 – TheCyberThrone

Critical SolarWinds Web Help Desk Vulnerabilities

SolarWinds has released a critical security advisory addressing multiple severe vulnerabilities in its Web Help Desk (WHD) platform that impact versions prior to 2026.1. Among the six issues patched, four…

PravinKarthik January 30, 2026

Dissecting CVE-2026-22709: The Zombie Exploit in Node.js vm2

CVE-2026-22709 represents a critical sandbox escape vulnerability in the widely used vm2 Node.js library, allowing attackers to achieve remote code execution (RCE) on host systems.This flaw revives concerns about vm2's…

PravinKarthik January 29, 2026

Nike’s Data Breach: WorldLeaks Strikes the Sportswear Giant

A massive cybersecurity incident has rocked Nike, with the extortion group WorldLeaks claiming responsibility for stealing and leaking over 1.4TB of internal data—nearly 190,000 files. The breach, which reportedly dates…

PravinKarthik January 28, 2026

CVE-2026-24858: Fortinet FortiCloud SSO Zero-Day Under Active Exploitation

A critical authentication bypass vulnerability, CVE-2026-24858, impacts multiple Fortinet products via flawed FortiCloud SSO controls. Fortinet confirmed active exploitation by malicious accounts before patches rolled out this week. Vulnerability Overview…

PravinKarthik January 28, 2026

Crunchbase Data Breach: ShinyHunters Exposes 2M+ Records

The startup intelligence platform Crunchbase confirmed a significant data breach on January 26, 2026, following claims by the notorious ShinyHunters hacking group. They leaked a 402 MB archive containing over…

PravinKarthik January 27, 2026

CISA KEV Catalog Update – 5 Vulnerabilities Added

1) CVE-2018-14634 – Linux Kernel Integer Overflow (Local Privilege Escalation) Type: Integer overflow in the Linux kernel’s create_elf_tables() function.Impact: A local, unprivileged user with access to a SUID or privileged…

PravinKarthik January 27, 2026

Pwn2Own Automotive 2026 Tokyo

Pwn2Own Automotive 2026 concluded with a landmark performance that highlighted both the expanding attack surface of modern automotive systems and the critical role of proactive security research in mitigating emerging…

PravinKarthik January 26, 2026

CVE-2026-24061 – 11 Year old Vulnerability gets traction

CVE-2026-24061 is a critical authentication bypass vulnerability in the telnetd service of GNU Inetutils versions 1.9.3 through 2.7.It allows remote attackers to gain root access by setting the USER environment…

PravinKarthik January 25, 2026