Latest news
-
Threat Intel via CyberScoop
Senators, rights groups say Trump administration breaking law by withholding surveillance court opinion
The Trump administration is breaking the law after being more than a month overdue on declassifying a court opinion on the surveillance of U.S. citizens, according to…
-
Threat Intel via Dark Reading
'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets
An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.
-
Vulnerabilities via The Hacker News
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The…
-
Threat Intel via CyberScoop
Authorities extradite Chinese national for alleged $37M investment scam
A 44-year-old Chinese national was extradited to the United States and arraigned in federal court for his alleged involvement in a sweeping investment scam network that…
-
Vulnerabilities via Rapid7
CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder
OverviewOn October 21, 2026, the Node.js Project published a security advisory for CVE-2026-111497, an out-of-bounds write in the Brotli decoder bundled with Node.js…
-
Breaches via The Record
Serbian autocrat loses election following widespread reports of digital repression
Serbian strongman leader Aleksandar Vučić on Sunday admitted defeat in his race for prime minister, a loss that follows a series of incidents of digital repression that…
-
Ransomware via ransomware.live
🏴☠️ Falcon has just published a new victim : Beasley Allen Law Firm
Plaintiff litigation law firm - Our 214 GB extraction includes executed agreements, final settlement participation agreements, court-signed stipulations regarding net…
-
Vulnerabilities via oss-security
Brotli CVE-2026-111497 and git-remote-https
Posted by Harry Sintonen on Oct 26 I haven't seen this mentioned here, yet: git https remote (git-remote-https) is vulnerable to CVE-2026-111497, too, when libcurl has…
- Advertisement
-
Threat Intel via The Record
Ukraine disputes Musk's claims of Starlink misuse as military connectivity restored
Ukrainian Defense Minister Yevhen Khmara said Saturday that Starlink and Starshield connectivity had been restored.
-
Threat Intel via The Record
Dutch police extradite Chinese national accused of laundering Cambodian investment scam funds
44-year-old Zheng Zhao was allegedly a key money-launderer working with a group of scammers who called U.S.-based victims and urged them to invest in fictitious…
-
Vulnerabilities via oss-security
GNU patch 2.8.1 released, fixes CVE-2026-115207
Posted by Alan Coopersmith on Oct 26 https://lists.gnu.org/archive/html/bug-patch/2026-10/msg00014.html announces:
-
Breaches via HIPAA Journal
Vendor Data Incidents Account for 69% of All Breach Victims
Cybersecurity incidents at vendors can have a massive impact, as they frequently result in unauthorized access to the data of many, and sometimes all, of their…
-
Vulnerabilities via BleepingComputer
Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches
A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.
-
AI Security via Simon Willison
webframe: evaluated as a scraper and a sandbox
Research: webframe: evaluated as a scraper and a sandbox webframe is a neat little project from Jeff Lindsay which lets you "run a web page like a program" - you point…
-
Threat Intel via Check Point Research
26th October – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 26th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Japanese cloud…
-
Threat Intel via Infosecurity Magazine
CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure
CISA’s new strategy, CISA 2030, will focus on rapid detection and response and resiliency of critical services ahead of “passive defense”
-
AI Security via Huntress
Meet the Huntress Neighborhood Watch Program
Learn more about how Huntress protects MSPs with our Neighborhood Watch Program. Test the agentic platform and 24/7 SOC in your environment before rolling out to clients.
-
AI Security via Straiker
What Is Agentic Security vs. Agentic AI in Cybersecurity?
Learn the critical difference between Agentic AI for cybersecurity (defending the enterprise) and agentic security (securing autonomous AI agents).
-
Vulnerabilities via Ubuntu Security
USN-8956-1: Brotli vulnerability
It was discovered that Brotli incorrectly handled certain compressed streams. A remote attacker could possibly use this issue to cause a denial of service or execute…
-
Threat Intel via The Hacker News
Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use…