Introduction to CVE-2026-25742 Vulnerability The cybersecurity landscape changes rapidly, and new vulnerabilities can pose risks to your infrastructure. The CVE-2026-25742 vulnerability in Zulip highlights the need for robust server security measures. System administrators and hosting providers must stay vigilant to protect Linux servers from potential threats. Understanding CVE-2026-25742 Prior to version 11.6, Zulip, an open-source […]

Understanding CVE-2026-26058: A Path Traversal Vulnerability in Zulip Zulip is an open-source team collaboration tool. Recently, a critical vulnerability, CVE-2026-26058, was discovered which could impact server security. This vulnerability exists from version 1.4.0 through to just before version 11.6, allowing attackers to exploit servers by leveraging path traversal techniques during the import process. What Happened? […]

Introduction to CVE-2026-25742 Vulnerability The cybersecurity landscape changes rapidly, and new vulnerabilities can pose risks to your infrastructure. The CVE-2026-25742 vulnerability in Zulip highlights the need for robust server security measures. System administrators and hosting providers must stay vigilant to protect Linux servers from potential threats. Understanding CVE-2026-25742 Prior to version 11.6, Zulip, an open-source […]

Understanding CVE-2026-26058: A Path Traversal Vulnerability in Zulip Zulip is an open-source team collaboration tool. Recently, a critical vulnerability, CVE-2026-26058, was discovered which could impact server security. This vulnerability exists from version 1.4.0 through to just before version 11.6, allowing attackers to exploit servers by leveraging path traversal techniques during the import process. What Happened? […]

WordPress is the most known CMS in the world currently (WordPress runs 32% of the entire internet), we hear that it is the easiest CMS to handle, to install and to use. Taking all these information into account, we would think that it is safe as a house. Wrong! It might be easy to use, […]

We’d like to start this year with a great announcement. Our purpose is to help make your servers safe and your service reliable. Your customers’ satisfaction is as much important for us as it is for you. That’s why we created a brand-new feature in order to make BitNinja more convenient for your users. This […]

As we look back now, it is amazing to remember all the things we achieved together and all the threats BitNinja saved us from since the start of the year. Here’s a five minute summary of what we have been up to in 2018. Hacker-free new year to everyone! See you in 2019! Thank you […]

A few months ago our Attack Vector Miner discovered a new botnet, that we simply call „Hello Peppa botnet”. Now, this botnet welcomes the new year in a new mask. Specifics of this botnet Its behaviour stayed the same, like what we mentioned in the case of the Hello Peppa: Checks backdoors which remained from […]

We love to talk about our Web Application Firewall (in short: WAF) module, since its’ complete makeover and upgrade. Before the WAF 2.0, we had a previous Web Application Firewall module that’s been completely redesigned: this was the reason why the new WAF module got a brand new name too: it’s called WAFManager now. But […]

If you’re a WordPress user, then this following article is a must for you. However, if you are interested in website vulnerabilities and how they can be attacked, and you wish to upgrade your knowledge about them, you’ve also come to the perfect place as well. In this article, we’ll be talking about the user […]

We are happy to announce the release of our brand-new BitNinja Plesk extension. From now on, Plesk customers can get all the advantages and secure their Linux servers much easier from their Plesk panel. The BitNinja Plesk Extension gives you real-time protection against a wide range of threats without the need of any configuration and […]

FastComet is one of the trendiest web hosting companies these days. They have more than 45,000 customers from 83 countries, over nine years of experience in system administration, and they’ve been providing public cloud hosting services since 2013. FastComet has a very high rating on HostAdvice, thanks to their high reliability, excellent 24/7 support, affordable […]

Your server’s safety is the number one priority for us, that’s why we have created two new BitNinja WAF rules which are already part of the safe minimum ruleset. They grant protection against the following vulnerabilities: Magento Remote Execution Protection Those who are using Magento and didn't apply the patch are vulnerable to RCE (remote code […]

CVE-2026-28766: A Critical Vulnerability in Gardyn Cloud API The Gardyn Cloud API has exposed a severe vulnerability known as CVE-2026-28766. This critical flaw allows unauthorized access to all user account data without any authentication requirements. Understanding the Incident This vulnerability has been given a CVSS score of 9.3, indicating a critical risk level. It enables […]

Understanding CVE-2026-28767: A Critical Vulnerability In recent cybersecurity news, a major vulnerability has been identified as CVE-2026-28767. This flaw in the Gardyn Cloud API allows unauthorized access to sensitive administrative endpoints. It raises significant concerns for server security, particularly for system administrators and hosting providers. Details of the Vulnerability The CVE-2026-28767 vulnerability relates to a […]

Critical Vulnerability in Gardyn Cloud API: CVE-2026-25197 The recent discovery of a severe vulnerability in the Gardyn Cloud API has raised significant alarms in the cybersecurity community. This vulnerability, known as CVE-2026-25197, allows authenticated users to access other user profiles by modifying the ID number within the API call. This oversight opens the door to […]