Browsing Category
Vulnerability
102 posts
Critical cPanel Flaw Lets Hosting Users Grab Database Root Access | CVE-2026-58048
A critical security vulnerability patched in cPanel could allow authenticated web hosting users to cross privilege boundaries and…
August 4, 2026
WP2Shell: Why Millions of WordPress Sites Are at Risk | CVE-2026-63030
The CVE-2026-63030 – “wp2shell”: Why Millions of WordPress Sites Are Vulnerable and Emergency to Patch If you run…
July 18, 2026
Zero-Day in Cursor Code Editor – Security Firm Discloses
Cybersecurity research firm Mindgard has disclosed details about an zero-day vulnerability in Cursor, a popular AI-assisted code editor.…
July 15, 2026
Exposed: Three Evilginx Campaigns Targeting Microsoft 365
A threat actor behind an active Microsoft 365 Evilginx campaign accidentally exposed its own infrastructure after leaving a…
July 13, 2026
Tenda Routers Exposed: Hidden Backdoor Found Affect Millions
A severe, undocumented authentication backdoor has been discovered in the firmware of multiple Tenda WiFi routers. The vulnerability…
July 7, 2026
10 Real-World CVEs Explained: What Every Security Professional Must Learn (2026)
By HOC Team | Last updated: June 2026 | Read time: ~22 min The best way to understand…
July 1, 2026
OpenAI Launches ‘Daybreak’: GPT-5.5 Powered To Detect Sotfware Vulnerability
Daybreak is more than just a new AI model — it’s a complete cybersecurity platform built to develop…
May 12, 2026
Microsoft Issues Emergency Patch for Actively Exploited Office Zero-Day (CVE-2026-21509)
In a critical “out-of-band” security update released on January 26, 2026, Microsoft confirmed that threat actors are actively…
January 28, 2026
Critical NI8MARE Vulnerability Exposes N8N To Full TakeOver
A new critical vulnerability found in N8N, codenamed “Ni8mare,” has been discovered in the popular workflow automation platform…
January 9, 2026
GhostPairing Attack: How Hackers Secretly Hijack WhatsApp
A recent investigation by cybersecurity firm Gen Digital has uncovered a social engineering campaign known as “GhostPairing Attack.”…
December 18, 2025