ModSecurity Security Flaws Enable WAF Rule Evasion With Crafted HTTP Requests

ModSecurity, a widely used open-source web application firewall (WAF), has multiple security vulnerabilities that allow attackers to bypass detection with specially crafted HTTP requests. These vulnerabilities, identified as CVE-2026-52761 and CVE-2026-52747, affect ModSecurity versions up to 3.0.15. They have been…

SSH Attackers Use Single Exec Commands to Bypass Interactive Honeypot Analysis

SSH attackers are increasingly abusing single non-interactive exec commands over SSH to bypass traditional honeypot analysis, effectively turning post-authentication activity into short, automated probes rather than interactive shell sessions that deception systems were designed to study. Recent measurements on eleven…

IT Security News Weekly Summary 27

210 posts were published in the last hour 21:55 : IT Security News Daily Summary 2026-07-05 20:6 : Medtronic Notifies 3.8 Million After ShinyHunters Data Breach 19:5 : IT Security News Hourly Summary 2026-07-05 21h : 2 posts 18:34 :…

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 104

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Hijacked npm Packages Use Novel VSCode Autorun and Blockchain Dead Drops to Deploy a Credential/Crypto Stealer   Building a CI/CD…