New Linux PamDOORa Backdoor Uses PAM Modules to Steal SSH Credentials
Cybersecurity researchers have discovered PamDOORa Linux backdoor being sold on Russian cybercrime forums for $1,600.
Secure.com News
Stay updated with the latest cybersecurity news, threat intelligence, and industry updates from secure.com.
Browse by Category
New Linux Bug ‘Dirty Frag’ Hands Root Access to Attackers
A newly disclosed Dirty Frag Linux vulnerability allows attackers to gain root privileges by chaining two separate kernel flaws together.
Vimeo Data Breach Exposes 119,000 Users Unique Email Addresses
A Vimeo data breach discovered in April 2026 exposed 119,000 unique email addresses through a supply chain security incident.
Instructure Data Breach Exposes Canvas Users After ShinyHunters Attack
The Instructure data breach exposed Canvas user information after ShinyHunters claimed responsibility for the second incident in eight months.
Trellix Source Code Breach: Hackers Gain Unauthorized Access to Repository
Cybersecurity company Trellix disclosed a Trellix source code breach where hackers gained unauthorized access to portions of its code repository.
CVE-2026-31431: The Linux Kernel Bug That Hid in Plain Sight for Nine Years
A Linux kernel zero-day tracked as CVE-2026-31431 gives any unprivileged local user full root access on every major Linux distribution shipped since 2017.
New Vect 2.0 Ransomware Targets Windows, Linux, and ESXi. And Paying Won’t Save Your Files.
A new Vect 2.0 ransomware operation is permanently destroying enterprise files across Windows, Linux, and VMware ESXi, and paying the ransom does nothing.
One Git Push. Full Access to Millions of Repositories.
A critical GitHub RCE vulnerability, CVE-2026-3854, allowed any authenticated user to compromise GitHub's backend infrastructure with a single git push command.
Vidar Infostealer Tops the Chaotic Cybercrime Market After Lumma’s Collapse
The Vidar infostealer just became the dominant credential thief on the dark web, and security teams have less than 48 hours to react.
A Cursor AI Agent Deleted a Startup’s Entire Database in 9 Seconds. Three Companies Failed at Once.
An AI agent deleted an entire production database in 9 seconds, and the three failures that made it possible are putting every developer running AI agents...
ClickUp Left 959 Customer Emails Exposed for 465 Days. The Fix Takes 90 Seconds.
A ClickUp data leak, triggered by a hardcoded API key sitting in plain sight, put Fortune 500 and government email addresses at risk for over a...
LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure
Attackers exploited a critical LMDeploy security flaw within 13 hours of its public disclosure, highlighting the urgent risks facing AI infrastructure.