TECHNO CHAT / TECH BLOG

Latest articles — page 3

WordPress Imagick RCE (CVE-2026-65640): What Site Owners Need to Know

WordPress has just released a security-focused update — version 7.0.4 — to close a remote code execution flaw that can be triggered when images are processed with the Imagick extension and Ghostscript. The vulnerability, tracked as CVE-2026-65640 and described in GHSA-8vr3-7mxf-gx8w, was responsibly disclosed by researchers at pwn.ai. While exploitation requires an authenticated Author-level account or higher, the bug’s mechanics mean multi-author sites, membership platforms, and installations with broad contributor…

Saugata DattaAug 13, 20264 min read81

Cybersecurity

Cisco Issues Emergency Fix for Firewall Zero-Day Under Active Attack

Cisco has issued an urgent warning to organizations worldwide following the discovery of a zero-day vulnerability in its core firewall software. Tracked as CVE-2026-20349, the flaw is currently being exploited in the wild, allowing unauthenticated attackers to trigger a denial-of-service (DoS) condition. Because this vulnerability affects the perimeter of the network—the very place designed to keep threats out—security teams are being urged to prioritize patching immediately. The Nature of the…

Saugata DattaAug 13, 20263 min read128

Cybersecurity

Critical Adobe Commerce Flaws Put Online Stores at Risk — Patch Now

Adobe has rolled out an urgent August 2026 security update for Adobe Commerce and Magento Open Source to fix a cluster of authorization and stored cross-site scripting (XSS) flaws that, together, present a significant threat to e-commerce environments. The most severe issue, CVE-2026-71362, is an incorrect-authorization vulnerability rated 9.1 (CVSS) that could allow an unauthenticated attacker to escalate privileges and execute arbitrary code. While Adobe reports no known active exploitation…

Saugata DattaAug 13, 20264 min read127

Cybersecurity

2.86 Billion Credentials Flood Criminal Markets — How Infostealers and Initial-Access Brokers Are Reshaping Risk

Stolen login data has become a commodity so abundant that it’s now cheap to buy in bulk — and alarmingly effective when attackers use it to pivot into corporate environments. In 2025, researchers reported roughly 2.86 billion compromised credentials traded across underground markets. That scale changes the calculus of identity: a correct username and password no longer prove much when attackers can acquire massive volumes of records, cookies, and browser…

Saugata DattaAug 12, 20264 min read149

Cloud Computing

Google’s Quick Share Gains Tap-to-Share Mode with Pixel 11

Alongside the Pixel 11 announcement, Google has upgraded Quick Share with a tap-to-share mode that makes transferring contacts, photos, videos and other items between Android devices near-instant. The company describes the feature as an “instant, two-way exchange”: bring two compatible Android phones close together and the devices complete the transfer with a simple tap. The update is rolling out now to many Pixel models and will expand to select Samsung…

Saugata DattaAug 12, 20263 min read87

Cybersecurity

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

A newly disclosed critical flaw in VMware vCenter (CVE-2026-59310) has moved quickly from patch release to active exploitation, according to investigative reporting and telemetry from security firms. The vulnerability—a directory traversal bug that allows an actor with network access to execute arbitrary code—was patched by Broadcom late last month, and forensic evidence collected by QUIRSO indicates attackers were able to chain that weakness into persistent remote access on production appliances…

Saugata DattaAug 12, 20264 min read134

Cloud Computing

Ransomware Strikes Colombian Justice Ministry Ahead of Presidential Transition

Colombia's Ministry of Justice was hit by a ransomware attack on August 2, affecting parts of its IT infrastructure and degrading several public-facing services just days before a national presidential handover. The disruption touched systems used for illicit-drug monitoring and legal processes; while some files were encrypted, the acting minister at the time, Cielo Rusinque, said publicly that there was no evidence of data exfiltration. The incident arrived amid heightened…

Saugata DattaAug 12, 20264 min read75

Microsoft

Microsoft Confirms July Windows Update Is Causing Some Dell Laptops to Shut Down and Overheat

Microsoft has acknowledged that a recent Windows 11 preview update has caused a limited number of Dell laptops to experience unexpected shutdowns, higher operating temperatures, rapid battery drain, and reduced performance. The issue was first flagged during Dell’s internal testing and later confirmed by Microsoft on July 14, 2026. A specific Intel driver interacting with a newly introduced Windows USB-C Connection Manager appears to be the root cause. The problem…

Saugata DattaJul 16, 20263 min read88

Cybersecurity

CISA Flags Actively Exploited Adobe ColdFusion Path Traversal (CVE-2026-48282)

Adobe ColdFusion administrators woke up to an urgent warning this week: a critical path traversal vulnerability (CVE-2026-48282) is being actively exploited in the wild. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the flaw to its Known Exploited Vulnerabilities (KEV) catalog on July 7, 2026, and issued a binding remediation timeline for federal agencies under BOD 26-04 that requires action by July 10, 2026. Because ColdFusion is frequently internet-facing…

Saugata DattaJul 8, 20264 min read139

Cybersecurity

70% of WordPress Sites Running Outdated PHP Versions, Leaving Millions Exposed

A recent analysis of publicly accessible WordPress installations has revealed a startling reality: a large majority of sites are running PHP versions that are no longer supported, creating a widespread and avoidable security risk. While WordPress itself issues regular updates, the underlying server-side language many sites rely on—PHP—has lagged behind in adoption. The result is an ecosystem where millions of sites are exposed to known vulnerabilities, automated scanning, and opportunistic…

Saugata DattaJul 8, 20264 min read154

Cloud Computing

Microsoft Extends Windows 10 Extended Security Updates Through October 2027

Microsoft has quietly extended its consumer Extended Security Updates (ESU) program for Windows 10, pushing the cutoff for critical security patches out another year to October 12, 2027. The move gives millions of users who have not yet migrated to Windows 11 additional time to receive important and critical security fixes, while Microsoft continues to encourage upgrades to the newer OS. For those already enrolled in the consumer ESU program,…

Saugata DattaJun 26, 20263 min read105

Cybersecurity

Russia Used Cellebrite’s UFED to Breach an Activist’s iPhone — and the Tools Kept Working

In June 2021, Russian authorities seized the devices of opposition figure Andrey Pivovarov and, according to a forensic report later analyzed by Citizen Lab, used traces of Cellebrite’s Universal Forensic Extraction Device (UFED) to extract messages and search for political names. The case is striking because it appears to show forensic use of Cellebrite technology months after the company publicly said it had terminated contracts with Russian customers — raising…

Saugata DattaJun 26, 20264 min read95

Latest articles — page 3

Free Tools: IP, DNS, SSL