Latest news

Advertisement
  1. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-96311 Windows Network List Service Tampering Vulnerability

    Updated an acknowledgement. This is an informational change only.

  2. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-69926 Desktop Window Manager Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

  3. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-96234 .NET Information Disclosure Vulnerability

    Updated an acknowledgement. This is an informational change only.

  4. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability

    Updated an acknowledgement. This is an informational change only.

  5. Threat Intel via BleepingComputer

    Chinese man extradited for role in $36 million cryptocurrency scam

    A Chinese national was arraigned in California after being extradited from the Netherlands for his alleged involvement in a cryptocurrency investment scam that stole…

  6. Vulnerabilities via HIPAA Journal

    Multiple Vulnerabilities Identified in Component Used by Smile Digital Health’s Smile CDR

    Four vulnerabilities have been identified in HAPI FHIR, the open-source Java library and server framework that implements the HL7 FHIR standard, that affect Smile…

  7. Vulnerabilities via Canadian Centre for Cyber Security

    Red Hat security advisory (AV26-1084)

    Serial number: AV26-1084 Date: October 26, 2026 As of October 20, 2026, Red Hat is affected by vulnerabilities in the following products: Red Hat Enterprise Linux 10 All…

  8. Vulnerabilities via Malwarebytes Labs

    Popcorn Time’s forgotten updater left millions of devices exposed to hijacking

    You may have forgotten about Popcorn Time. Unfortunately, its updater didn’t forget about your device. Security researchers have intervened to disable an abandoned…

  9. Advertisement
  10. Vulnerabilities via NCSC-NL

    NCSC-2026-0454 [1.00] [M/H] Kwetsbaarheden verholpen in HPE Networking AOS

    HPE heeft 72 kwetsbaarheden verholpen in HPE Networking AOS-8 en AOS-10, waaronder Mobility Conductors, Mobility Controllers, Mobility Gateways en Access Points. De…

  11. Vulnerabilities via Canadian Centre for Cyber Security

    [Control Systems] Siemens security advisory (AV26-1083)

    Serial number: AV26-1083 Date: October 26, 2026 As of October 26, 2026, Siemens is affected by a vulnerability in the following products: Mendix SAML (Mendix 10…

  12. Threat Intel via CyberScoop

    CISA publishes strategy with eye on the next four years

    The Cybersecurity and Infrastructure Security Agency published a strategy Monday that focuses on taking a leading role in cyber defense, prioritizing protection of…

  13. Vulnerabilities via SecurityWeek

    PHP2Shell Exploitation Moves From Probes to Working Shells

    Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on October 24.

  14. Vulnerabilities via Canadian Centre for Cyber Security

    IBM security advisory (AV26-1082)

    Serial number: AV26-1082 Date: October 26, 2026 As of October 20, 2026, IBM is affected by vulnerabilities in the following products: IBM App Connect Enterprise Versions…

  15. Vulnerabilities via ESET WeLiveSecurity

    PHP2Shell: What to know about two critical PHP flaws

    Here's the lowdown on CVE-2026-109618 and CVE-2026-109619, as well as what website owners and IT teams should do to stay safe – all in a little more than two minutes

  16. Threat Intel via Help Net Security

    Kali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3

    The Kali Linux team released version 2026.3 after overhauling the public build scripts it uses to produce every official image. The refreshed scripts share the same…

  17. Threat Intel via Wiz

    The Pwn Request Reckoning: What Still Works Against GitHub Actions

    GitHub's 2026 Actions changes make pull_request_target attacks harder, but not impossible. Here's the residual attack surface and how to audit for it.

  18. AI Security via Help Net Security

    Security pros reckon the biggest AI risk comes with an employee badge

    Employees pasting company data into AI tools worry security teams more than AI-powered attacks do. Most-concerning risks of AI agents (Source: O’Reilly) AI-generated…

  19. Vulnerabilities via Sonar

    The SonarQube Remediation Agent now fixes Hunter Agent findings

    In August, SonarQube Hunter Agent became generally available on SonarQube Cloud, giving teams a way to find the security flaws that pattern-based analysis misses. Broken…

  20. Threat Intel via SecurityWeek

    953 Online Stores Infected in Long-Lasting Malware Campaign

    Small loader code injected into the stores served a payload to visitors or did nothing to avoid detection.

  21. Vulnerabilities via Infosecurity Magazine

    Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw

    Microsoft’s updates address two newly disclosed vulnerabilities in the .NET developer platform, as well as flaws not fully addressed in an earlier release