Latest news
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-96196 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-62765 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
Vulnerabilities via The Hacker News
GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client…
-
Vulnerabilities via The Hacker News
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as…
-
Breaches via ransomware.live
🏴☠️ Booba project has just published a new victim : RCOA- Regent Christian Online Academy
Hospitals and Health Care Stolen data: 1 GB.
-
Breaches via ransomware.live
🏴☠️ Booba project has just published a new victim : Kerckstede vzw
Hospitals and Health Care Stolen data: 10 GB.
-
Breaches via ransomware.live
🏴☠️ Booba project has just published a new victim : Hudson River Museum
Museums, Historical Sites, and Zoos Stolen data: 115 GB.
-
Threat Intel via The Record
Malicious apps prey on Russians’ anxiety about fuel prices, drone strikes
Cybercriminals are stuffing infostealer malware into bogus apps aimed at tracking gas prices, police activity, drone strikes and other information of concern to average…
- Advertisement
-
Breaches via TechCrunch
Japan internet giant GMO says hackers posted stolen customer data
Japan's GMO Internet is verifying alleged customer data posted by suspected hackers following a cloud service breach.
-
Breaches via RansomLook
Aesthetic Specialty Centre By booba team
Medical Practices Website: www.asc-psd.com Stolen data: 22GB.
-
Breaches via SecurityWeek
Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
A leaked SquareML access key could have been used to access a database containing personal and health information.
-
AI Security via Wired
UK Politician Jess Asato Got Deepfaked. Now She’s Taking xAI to Court
Jess Asato’s public campaigning for victims of online abuse put her in the crosshairs of Grok’s deepfake scandal. Then the UK member of parliament became a victim of the…
-
AI Security via Help Net Security
Socure links AI agents to verified people and businesses
Socure has launched Agent Intelligence, a suite that detects AI agents, scores whether they should be trusted, and ties each agent to the verified person or business…
-
Vulnerabilities via Canadian Centre for Cyber Security
[Control Systems] Moxa security advisory (AV26-1089)
Serial number: AV26-1089 Date: October 27, 2026 As of October 27, 2026, Moxa is affected by vulnerabilities in the following products: Moxa Remote Connect Suite (MRC…
-
Breaches via Wiz
PHP2Shell: Exploitation Attempts and Remediation Trends
Wiz research has been monitoring PHP2Shell exploitation attempts, but none have succeeded so far. We examine the techniques used, what prevented the attacks from…
-
Threat Intel via The Record
Moscow faces internet disruptions as foreign leaders gather for summits
The restrictions will be in place from October 27 to 29, coinciding with the Gas Exporting Countries Forum summit and the Russia-Africa summit, Russia's Ministry of…
-
Vulnerabilities via The Record
CISA warns of PHP bug exploitation attempts, gives federal agencies days to patch
CISA added the widely publicized PHP vulnerabilities to the KEV, but didn't specify what kind of exploitation it was observing.
-
Vulnerabilities via SecurityWeek
HPE Patches Dozens of Critical Flaws in Networking Products
Eight max-severity security defects could lead to remote code execution and authentication bypass.
-
Threat Intel via The Record
Australia’s spies are sharing intelligence with hacking targets — and want them to share back
More than half of the individual warnings from the Australian Signals Directorate (ASD) drew on previously secret material that had been cleared for disclosure…
-
AI Security via Help Net Security
Sekoia introduces self-hosted deployment for organizations with strict data controls
Sekoia has introduced Sekoia Self-Hosted, a deployment model that brings the Sekoia SOC platform into the customer’s own infrastructure. Designed for large…