Latest news
-
Vulnerabilities via SOCRadar
Node2Shell: Brotli Flaw Hits Python Packages
The Node2Shell Brotli flaw (CVE-2026-111497), disclosed alongside Node.js fixes on October 21, 2026, also reaches Python through the PyPI Brotli and brotlicffi packages…
-
Ransomware via ransomware.live
🏴☠️ Auditteam has just published a new victim : Safe Data Storage
Safe Data Storage Ltd is an active UK-based SME IT services company founded in 2004, headquartered in Orpington, Kent, and run by David Cleaver and others; it offers…
-
Breaches via SOCRadar
Finaxis, WoWInstaller, Moodle, MyHairCare & HT Médica Leaks
SOCRadar Dark Web Team identified several underground posts, including an alleged Finaxis.cloud data sale involving 400GB of information, a resurfaced WoWInstaller…
-
Threat Intel via Security Affairs
Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram
uCreater is Android spyware disguised as trusted apps, stealing credentials, messages and wallet data through a rentable platform. uCreater is a rentable Android spyware…
-
AI Security via GuidePoint Security
AI Agents Don’t Stop at the Device. Your Security Program Shouldn’t Either.
AI Agents Don’t Stop at the Device. Your Security Program Shouldn’t Either. October 26, 2026 GuidePoint Security By Chris Hughes, VP Security Strategy, Noma BLOG 5 min.
-
Threat Intel via The Record
Popular AI tool LiteLLM says unrevoked key allowed hackers to target users
LiteLLM, an open-source tool widely used by artificial intelligence developers, said a key accidentally exposed in May was behind a supply-chain attack that is believed…
-
Vulnerabilities via CISA
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog and updated the PHP Alert, Critical Vulnerabilities in PHP Require Immediate…
-
Vulnerabilities via The Hacker News
Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to…
- Advertisement
-
Threat Intel via SecurityWeek
Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts
The individuals called victims and persuaded them to install an app and scan their credit cards to loot their bank accounts.
-
Breaches via Malwarebytes Labs
Patient records exposed in Quest breach: What you need to know
Quest Diagnostics has confirmed that an unauthorized party accessed a system healthcare providers use to order laboratory tests and view results, affecting personal…
-
AI Security via Help Net Security
AI coding agents fall for malicious instructions planted in the Downloads folder
A file that a website saves to the Downloads folder without approval can trick AI coding agents into installing a malicious npm package or handing over the user’s login…
-
Threat Intel via The Hacker News
Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses
Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a network detection…
-
Vulnerabilities via Help Net Security
Fortinet patches critical FortiOS flaws found with AI help
Fortinet rolled out security hardening updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator last week, but is keeping the details about…
-
AI Security via Schneier on Security
Bias in Qwen3-Coder Model
Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the…
-
Threat Intel via Cyble
Know How Cyble Brand Intelligence Can Help Stop ClickFix Campaigns in its Tracks
Booking.com's systems were never breached. Its name was. Storm-1865 spent months borrowing Booking.com's identity to get into hotel computers, and every step of that…
-
Ransomware via ransomware.live
🏴☠️ Majinahanashi has just published a new victim : Bi-silque
A Portuguese manufacturing company that produces equipment for offices, schools, and presentations. Its product line includes whiteboards, corkboards, flip charts…
-
AI Security via Help Net Security
Anthropic details what stops Claude Duet from going rogue
Anthropic has outlined the security and privacy protections behind Claude Duet, its proactive AI agent that can monitor connected accounts and complete tasks while users…
-
Vulnerabilities via BleepingComputer
Kali Linux 2026.3 released with 7 new tools, desktop updates
Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more.
-
Vulnerabilities via BleepingComputer
Kali Linux 2026.3 released with 6 new tools, desktop updates
Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more.
-
Vulnerabilities via SecurityWeek
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution.