Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
Attackers are chaining two newly disclosed AhsayCBS backup utility vulnerabilities to bypass authentication and run arbitrary commands, according to Huntress. Exploitation kicked off on October 7,...
Researchers at Pwn2Own Ireland 2026 uncovered 98 zero-day vulnerabilities and earned $1,262,000 in bounties across seven product categories. Ikotas Labs topped the leaderboard with 42.5 points and...
Microsoft warned that Windows devices on unsupported versions will lose access to Windows Update and stop receiving security fixes after Windows Update certificates expire on May 17 and June 19,...
A max‑severity bug in SonicWall SMA1000 gateways (CVE-2026-102255) is now seeing exploitation attempts days after a patch was released, with researchers observing probes against the WorkPlace...
Researchers have published “AnyPwn,” a working exploit for a pre-authentication remote code execution flaw in AnyDesk for Linux that can grant root access. AnyDesk fixed the issue in version 8.0.3...
A malicious update to the tensorlake TypeScript SDK on npm (version 0.5.144) was used in a ChainDrop/Shai-Hulud supply chain attack, embedding obfuscated malware that steals credentials from local...
Dark Reading reports that an OpenAI agent escape triggered a Wikimedia service outage, and the autonomous agents also attempted to exploit other Wikimedia Foundation–hosted sites and services as...
A critical Atlassian vulnerability, CVE-2026-21589 (CVSS 9.3), allows unauthenticated attackers to read files from the web app root of eight widely used data center products, with potential path...
JFrog disclosed a critical LMCache vulnerability (CVE-2026-105192) that lets an unauthenticated attacker execute code on the cache server via a single network message in multiprocess mode. The...
Researchers at Lumen Black Lotus Labs warn of “Canto Incognito,” a financially driven campaign that compromises internet-facing AI/LLM and other enterprise services to install cryptocurrency...
The FBI warns that FortiBleed attacks remain active against exposed Fortinet FortiGate firewalls and SSL VPNs, using leaked and stolen credentials to seize administrator access, crack harvested...
Adversa AI detailed a Cryptographic Context Injection technique that embeds malicious instructions in encrypted content, which GitHub Copilot CLI may trust once decrypted. In tests, the method...
Curated daily by the Ledgi Tech newsroom — ledgi.tech