Latest news
-
AI Security via Dark Reading
So Many AI Security Benchmarks, But None Tell the Whole Story
Measuring AI model security gets complex fast — a growing patchwork of benchmarks targets different variables in the equation, but none replace testing against your own…
-
Vulnerabilities via CyberScoop
Experts temper emergency-level alarms over critical Brotli defect
Alarm bells ratcheted up yet again about an AI-discovered vulnerability that could — if exploited in the wild — destabilize vast stretches of the internet. The critical…
-
Ransomware via ransomware.live
🏴☠️ Dragonforce has just published a new victim : Zhito Technology
Provider and developer of smart logistics solutions and autonomous driving systems intended to serve the vehicle industry. The company develops intelligent vehicle…
-
Breaches via Splunk
SVD-2026-1014: Compromised eMudhra Intermediate Certificate Authorities on Splunk Products - October 2026
Splunk investigated and determined which products were affected by the compromised eMudhra Intermediate Certificate Authorities.
-
AI Security via JFrog Security Research
The Impact of AI on CVEs: Industry Challenges
Integrating artificial intelligence into cybersecurity has fundamentally changed vulnerability research - and not necessarily for the better. For decades, discovering…
-
Vulnerabilities via SANS Internet Storm Center
Apple Patches for October 2026, (Mon, Oct 26th)
Apple today released patches for 304 vulnerabilties. This number is still in line with prior Apple updates, and comes just about a month after the last apple update…
-
AI Security via ransomware.live
🏴☠️ Silentransomgroup has just published a new victim : Morrison Cohen
[AI generated] Morrison Cohen LLP is a United States law firm headquartered in New York City. It provides legal services across practice areas including corporate law…
-
Vulnerabilities via oss-security
CVE-2026-111422: Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host
Posted by Hussein Awala on Oct 26 Severity: low Affected versions: - Apache Airflow SSH provider 4.3.0 before 7.0.1 Description: In apache-airflow-providers-ssh before…
- Advertisement
-
Vulnerabilities via Debian Security
DSA-6585-2 thunderbird - regression update
https://security-tracker.debian.org/tracker/DSA-6585-2
-
Vulnerabilities via Debian Security
DSA-6589-1 php-mongodb - security update
https://security-tracker.debian.org/tracker/DSA-6589-1
-
Vulnerabilities via Debian Security
DSA-6588-1 openjdk-21 - security update
https://security-tracker.debian.org/tracker/DSA-6588-1
-
Vulnerabilities via Debian Security
DSA-6587-1 pdns - security update
https://security-tracker.debian.org/tracker/DSA-6587-1
-
Vulnerabilities via Debian Security
DSA-6586-1 valkey - security update
https://security-tracker.debian.org/tracker/DSA-6586-1
-
Vulnerabilities via Doyensec
ElectroNG is now open source!
ElectroNG is now free and open source! Today we are releasing both the desktop application and its core analysis engine under the Apache License 2.0, opening up years of…
-
Vulnerabilities via CERT/CC
VU#701544: mpc-lib Hardened Derivation Fails to Protect Ancestor Isolation
Overview Fireblocks' mpc-lib library contains a cryptographic fail-open vulnerability in its BIP32 hardened derivation implementation in the case of a missing private…
-
Breaches via BleepingComputer
University of Copenhagen data breach exposes data of 525,000 people
The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people.
-
AI Security via Cloudflare
Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang
On September 8, 2026, we were alerted by a security researcher, Gadi Evron from Knostic, to a tenant isolation issue affecting the GLM-5.3 Workers AI model…
-
Ransomware via ransomware.live
🏴☠️ Emperador has just published a new victim : Afflelou
Alain Afflelou is a leading European franchisor of optical and hearing aid products, founded in France in 1972. The company operates a robust network of over 1,500…
-
AI Security via Dark Reading
Risks & Rewards: How AI Is Redefining the CISO's Role
Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.
-
Vulnerabilities via oss-security
Godot 4.x: arbitrary code execution via .po translation file Plural-Forms header
Posted by Tomasz Kaye on Oct 26 A code-execution vulnerability in Godot 4.x translation loading was publicly disclosed on 2026-10-26 [1]. Affected versions: Godot 4.1.0…