Latest news
-
Vulnerabilities via Canadian Centre for Cyber Security
Craft CMS security advisory (AV26-1086)
Serial number: AV26-1086 Date: October 26, 2026 As of October 23, 2026, Craft CMS is affected by vulnerabilities in the following products: CMS Prior to 4.18.9 Prior to…
-
Vulnerabilities via BleepingComputer
Microsoft releases emergency .NET patches for critical Brotli flaw
Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell.
-
Vulnerabilities via Ubuntu Security
USN-8955-1: nginx vulnerabilities
It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this…
-
Vulnerabilities via Wordfence
Introducing the Wordfence Threat Response Team: A New Way to Report Active Threats in the WordPress Ecosystem
When a new threat to WordPress sites emerges, the first hours matter most. Today we’re introducing the Wordfence Threat Response Team, led by Alex Thomas and made up of…
-
Threat Intel via Security Affairs
AI-Generated Fake Bank Calls and NFC App Enabled €380,000 Fraud, Dutch Police Say
Dutch police arrest two men over AI-voiced bank fraud that allegedly used a fake app to steal card data from 170 victims, causing €380,000 in losses. Rotterdam police…
-
Threat Intel via Infosecurity Magazine
Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens
A large-scale GitHub campaign abused stolen access tokens to target 13,500+ branches and repositories with secret-stealing workflows
-
Vulnerabilities via SecurityWeek
Industrial Vendors Check Products for PHP2Shell Vulnerabilities
Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities.
-
Breaches via SecurityWeek
Genesys Hack Exposes Customer Data From Internal Systems
The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.
- Advertisement
-
AI Security via SecurityWeek
Stolen AI Reasoning Could Help China Build Cheaper Rivals
Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making it cheaper to distill a rival AI.
-
Breaches via HIPAA Journal
Free 30-Minute Review of Your Cybersecurity Priorities
Arrange a free, no-obligation 30-minute consultation with Blue Team Alpha for your organization. (This expert session is normally valued at $250) Cyberattacks on…
-
Threat Intel via The Record
Ukraine warns hackers are exploiting Chinese-made Dahua surveillance cameras
CERT-UA says it has identified cases in which hackers compromised Dahua internet-connected cameras and video recorders, changed their settings and created unauthorized…
-
Breaches via Wired
The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans
Two US senators say the Trump administration is breaking the law by withholding the FISA court decision while it presses Congress to renew America’s most sweeping…
-
Vulnerabilities via Canadian Centre for Cyber Security
Google security advisory (AV26-1085)
Serial number: AV26-1085 Date: October 26, 2026 As of October 22, 2026, Google is affected by a vulnerability in the following product: Brotli Versions 1.0.3 to versions…
-
Vulnerabilities via The Hacker News
⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More
This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere.
-
AI Security via BleepingComputer
When an AI Agent Is the Incident, the Identity Record Is the Evidence
A new NIST, CISA, and NSA guide treats runaway agents as incidents to be rehearsed. The hard part of the response is answering whose authority the agent used, and that…
-
Vulnerabilities via Dark Reading
10 Software Security Practices Built for the Next 250 Years
This Cybersecurity Awareness Month's theme, "Securing the Next 250," asks us to look beyond vulnerabilities and consider what will make our digital systems resilient for…
-
Vulnerabilities via Infosecurity Magazine
Linux Flaws Exposed Before Fixes as Root Exploit Goes Public
Six Linux flaws were made public, including one with a working root exploit and no merged fix
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-83519 Windows Error Reporting Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-70054 Windows NetBIOS Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-69923 Windows AI Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.