vBulletin fixes critical pre-auth RCE flaw with public exploit

Published on July 28, 2026

A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through template rendering. [...]

Continue reading on website
Other news

Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process

July 28, 2026
A new Mirai-derived botnet called Tengu can use a compromised Linux device's hardware watchdog to trigger a reboot when defenders kill its main process.If that happens, Tengu's other persistence mechanisms get another chance to relaunch it. Nozomi Networks Labs observed the dropper reaching its honeypots through Telnet credential brute force.Tengu supports 25 distributed denial-of-service (

CISA shares advice on isolating vital systems during cyberattacks

July 28, 2026
The U.S. and Australian governments have released new guidance urging critical infrastructure organizations to prepare to isolate vital operational technology systems in the event of a cyberattack or other major disruptions. [...]