Page Header

Critical 9.8 remote code execution in Dolibarr ERP CRM 7.0.3 via the db_name parameter in install/step1.php, unauthenticated attackers can execute arbitrary PHP and run commands via check.php cmd.

CVE-2026-5843: MLX-LM in Docker Model Runner on macOS allows arbitrary Python via model_file in config.json, leading to code execution on the host as the Docker Desktop user. Inventory, isolate and restrict registry pulls immediately.

Operator arrested in Canada after 25,000 DDoS commands and peaks near 31.4 Tbps; practical steps for businesses to verify DDoS readiness and supplier obligations.

A malicious Nx Console update exposed developer credentials and led to the loss of 3,800 GitHub internal repos; practical, Monday morning actions and ISO fit.