Latest news
-
Vulnerabilities via DataBreaches.net
GitLab warns of new max severity code execution vulnerability
Sergiu Gatlan reports: GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on…
-
Vulnerabilities via BleepingComputer
Microsoft releases Windows OOB updates to distrust eMudhra certificates
Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that…
-
Threat Intel via DataBreaches.net
Governments are hacking people with ‘zero-click’ spyware by showing them online ads
Zack Whittaker reports: Security researchers at digital rights unit The Citizen Lab say government spyware makers are abusing global advertising networks to target and…
-
AI Security via Dark Reading
Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills
Nathan Hamiel outlines potential SecOps horror in the AI midst, as core technical capabilities go the way of reading an atlas or remembering phone numbers.
-
Vulnerabilities via Help Net Security
Brotli bug reaches far beyond Node.js (CVE-2026-111497)
A vulnerability in Brotli, Google’s widely used open-source compression library, is putting a broad range of software at risk. About CVE-2026-111497 Alternatively known…
-
Threat Intel via HIPAA Journal
HHS Delegates Permissive Exclusion Authority to CMS
The Department of Health and Human Services (HHS) Office of Inspector General (OIG) is responsible for excluding individuals and entities from participation in federal…
-
Breaches via HIPAA Journal
Ransomware Incident at Paylogix Affects 41K Individuals
Data breaches have been announced by Paylogix, the Kenaitze Indian Tribe, the Center for Bone and Joint Surgery of the Palm Beaches, and Wichita Family Dental.
-
Threat Intel via Citizen Lab
Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’
The Guardian has reported on new findings by the Citizen Lab and SHARE Foundation that a Serbian professor and prominent supporter of the country’s student movement was…
- Advertisement
-
AI Security via Dark Reading
'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants
The malware's focus on AI tools expands the traditional infostealer playbook to expose a forest of AI sessions, sensitive business data, and developer infrastructure…
-
Ransomware via Infosecurity Magazine
Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances
The University of New Mexico is working to restore systems following the incident, which has been claimed by the BYOD ransomware group
-
Vulnerabilities via Ubuntu Security
USN-8957-1: authd vulnerability
Ali Mashally discovered that authd did not properly validate user identities when matching accounts from identity providers. An attacker could possibly use this issue to…
-
Vulnerabilities via Canadian Centre for Cyber Security
[Control systems] Hitachi security advisory (AV26-1091)
Serial Number: AV26-1091 Date: October 27, 2026 As of October 27, 2026, Hitachi is affected by vulnerabilities in the following products: HiRDB Server Version 10…
-
AI Security via BleepingComputer
Warp discloses breach exposing AI agent logs, user telemetry data
Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project's…
-
Threat Intel via Infosecurity Magazine
Hackers Infect 953 Online Stores With Scanner-Evading Code
Attackers have infected 953 online stores with a scanner-evading JavaScript loader since July 2025
-
AI Security via Infosecurity Magazine
OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
Researchers uncovered an OpenAI API flaw that exposed hidden AI reasoning traces, prompting a fix and a $6000 bug bounty reward
-
Vulnerabilities via GuidePoint Security
The Identities Nobody Is Governing Are About to Rotate Every 47 Days
The Identities Nobody Is Governing Are About to Rotate Every 47 Days October 27, 2026 Mark Whitesell BLOG 5 min. TL;DR – Public Transport Layer Security (TLS)…
-
Threat Intel via Malwarebytes Labs
Five election scams to watch out for
Elections give scammers plenty to work with: urgent deadlines, familiar faces, passionate supporters, and messages asking people to take action. Some want you to “fix”…
-
Vulnerabilities via oss-security
Re: Fwd: X.Org Security Advisory: multiple security issues in X.Org X client libraries
Posted by Alan Coopersmith on Oct 27 I don't know of any specific reason - I've asked our team members who got the CVEs assigned to let the CNA know that they can make…
-
Vulnerabilities via SecurityWeek
Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released.
-
Ransomware via CyberScoop
National cyber director rolls out latest pilot in South Carolina, this time for rural hospitals
The Office of the National Cyber Director has rolled out its second regional cyber pilot program, this one focused on rural hospitals. National Cyber Director Sean…