Latest news
-
Vulnerabilities via oss-security
Godot 4.x: remote client crash via multiplayer spawn packet sync_len overflow
Posted by Tomasz Kaye on Oct 27 A remote denial-of-service vulnerability in Godot 4.x multiplayer was publicly disclosed on 2026-10-27 [1]. Affected versions: Godot…
-
AI Security via Dark Reading
3 Frameworks to Protect CISOs & Orgs Against AI Liability
Cyber leaders can get ahead of AI liability with rigorous documentation, transparency, and smart contract negotiations with AI vendors.
-
Vulnerabilities via Ubuntu Security
USN-8956-2: Brotli vulnerability
USN-8956-1 fixed a vulnerability in Brotli. This update provides the corresponding fixes for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory…
-
Vulnerabilities via oss-security
Multiple vulnerabilities in samtools
Posted by Robert Davies on Oct 27 Multiple vulnerabilities, listed below, have been disclosed in the samtools package. These have all been fixed in a new release 1.25…
-
Vulnerabilities via oss-security
Multiple vulnerabilities in HTSlib
Posted by Robert Davies on Oct 27 Multiple vulnerabilities, listed below, have been disclosed in the HTSlib package. These have all been fixed in a new release 1.25 and…
-
Vulnerabilities via oss-security
Seccomp denylist bypass via 32-bit syscall argument truncation
Posted by Ricardo Branco on Oct 27 Hello, I am writing to share details regarding a seccomp filter bypass pattern affecting several projects (including containerd…
-
Threat Intel via BleepingComputer
Hackers hijack Convertr analytics script to steal payment card data
A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers' payment data during checkout.
-
Threat Intel via Dark Reading
External Teams Chats Anchor 15-Minute Malware Delivery
Main bombing sis getting a new look with a wide-scale, ongoing social engineering campaign that might be tied to the Black Basta ransomware gang.
- Advertisement
-
Vulnerabilities via Canadian Centre for Cyber Security
Adobe security advisory (AV26-697) – Update 1
Serial number: AV26–697 Date: July 14, 2026 Updated: October 27, 2026 On July 14, 2026, Adobe published security advisories to address critical vulnerabilities in the…
-
AI Security via CyberScoop
All the security risks Anthropic is worried about before its IPO
Anthropic said its AI systems could drastically reshape the software and cybersecurity sectors in the “near term,” while also laying out a litany of cybersecurity and…
-
Ransomware via The Record
Nefilim, Hive ransomware operator given five-year-plus sentence after guilty plea
Ukrainian national Artem Stryzhak, 36, had pleaded guilty last year to charges related to participating in at least two well-known ransomware groups.
-
Breaches via DataBreaches.net
Navigate360’s lack of transparency is catching up with them; More organizations tell people NOT to use their tiplines.
Multiple Ontario Crime Stoppers organizations have suspended use due to Navigate360’s data breach and unacceptable incident response; U.S. state education departments…
-
Vulnerabilities via Chrome Releases
Chrome for Android Update
Hi, everyone! We've just released Chrome 156 (156.0.8078.73) for Android. It'll become available on Google Play over the next few days.
-
Vulnerabilities via Cisco PSIRT
Vulnerabilities in node.js Affecting Cisco Products: October 2026
On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These…
-
Vulnerabilities via Chrome Releases
Stable Channel Update for Desktop
The Stable channel has been updated to 156.0.8078.73/.74 for Windows and Mac and 156.0.8078.73 to Linux which will roll out over the coming days/weeks. A full list of…
-
Vulnerabilities via Ars Technica
Code-execution flaw in UEFI firmware threatens most servers on planet Earth
Defenders across the world face the burden of responding to yet another botched code-execution vulnerability, this time in boot-time firmware used by most of the world’s…
-
Breaches via DataBreaches.net
University of Copenhagen data breach exposes data of 525,000 people
Bill Toulas reports: The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000…
-
Ransomware via RansomLook
Natsoft Corporation: 618 GB Gone, Silence Kept By leaknet
#CyberSecurity #DataBreach #Natsoft #LeakNet #ITcompanybreach
-
Threat Intel via Dark Reading
SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack
A recent Shai-Hulud attack shows defenders need real-time visibility into production code and affected services to respond to supply chain compromises.
-
Threat Intel via DataBreaches.net
Hacking attempts against US Federal Election Commission system triggered outage, email shows
Dawn Kopecki reports: The US Federal Election Commission’s website has been targeted by a hacker or hackers, disrupting the agency’s electronic filings system a week…