Latest news

Advertisement
  1. Ransomware via ransomware.live

    🏴☠️ Payload has just published a new victim : Edelstahl-Mechanik GmbH

    Edelstahl-Mechanik GmbH is a German manufacturing company based in Göppingen. The company specializes in laser metal processing, including 2D and 3D laser cutting and…

  2. Vulnerabilities via oss-security

    CVE-2026-72705: Rocq guard checker accepts fixpoint passed as higher-order argument (0 = 1 demonstrated)

    Posted by Jonathan Brossard on Oct 25 1. Summary A soundness bug in the Rocq (formerly Coq) kernel's guard checker allows construction of a checked proof of False — and…

  3. Vulnerabilities via oss-security

    CVE-2026-72704: Rocq guard checker trusts corrupted recursive tree after transport (0 = 1 demonstrated) — 0-day

    Posted by Jonathan Brossard on Oct 25 1. Summary A soundness bug in the Rocq (formerly Coq) kernel's guard checker allows construction of a checked proof of False — and…

  4. Vulnerabilities via oss-security

    CVE-2026-72703: Rocq guard checker accepts non-terminating fixpoint via unchecked cross-calls (0 = 1 demonstrated)

    Posted by Jonathan Brossard on Oct 25 1. Summary A soundness bug in the Rocq (formerly Coq) kernel's guard checker allows construction of a checked proof of False — and…

  5. Vulnerabilities via oss-security

    CVE-2026-72711: Lean 4 kernel soundness bug — inference cache poisoning via opaque declarations (0 = 1 demonstrated)

    Posted by Jonathan Brossard on Oct 25 1. Summary A soundness bug in the Lean 4 kernel allows construction of a checked proof of False — and by extension, any…

  6. Vulnerabilities via oss-security

    CVE-2026-72844: Lean 4 kernel soundness bug — forging proofs via nested inductive projections (0 = 1 demonstrated)

    Posted by Jonathan Brossard on Oct 25 1. Summary A soundness bug in the Lean 4 kernel allows construction of a checked proof of False — and by extension, any…

  7. Vulnerabilities via oss-security

    CVE-2025-60477: GPAC/MP4Box: NULL Pointer Dereference in gf_filter_pid_resolve_file_template_ex on crafted MP4 with special metadata

    Posted by Alexander A. Shvedov on Oct 25 Product: GPAC (MP4Box) Affected: gpac/gpac prior to fix commit (see References) CVE: CVE-2025-60477 CWE: CWE-476 (NULL Pointer…

  8. Breaches via ransomware.live

    🏴☠️ Whitearmor has just published a new victim : J.B Hunt

    You are so stupid JB Hunt. Instead of getting in contact with us & starting the negotiation process, not only did you not announce the breach, you silently email…

  9. Advertisement
  10. Vulnerabilities via Elastic Security Labs

    Kernel eviction notice: What wesp.sys reveals about the Windows Endpoint Security Platform

    Microsoft is building a way for EDR products to run outside the Windows kernel. It is called the Windows Endpoint Security Platform, and two of its binaries already ship…

  11. Threat Intel via Datadog Security Labs

    Code security for new coders

    This post breaks down essential code security terms and tools so that you can build safely from the start.

  12. Threat Intel via Hudson Rock

    Infostealers Weekly Report: 2026-10-19 – 2026-10-26

    InfoStealers Weekly Report – In this comprehensive report, we provide you with valuable insights into the most pressing threats facing organizations today. As…

  13. Threat Intel via JFrog Security Research

    Beyond testmetest: Native Addon Camouflage and 42 Armed GitHub Repositories Reveal a Hidden npm Publisher

    JFrog Security Research has identified **42 armed third-party GitHub repositories across 11 legitimate owners** connected to the `testmetest` npm campaign. The…

  14. Vulnerabilities via Help Net Security

    OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken

    The OpenSSL project released version 4.1.0, adding support for DTLS 1.3 and listing four known bugs in the DTLS code that ships with it. DTLS is the variant of TLS built…

  15. Threat Intel via SANS Internet Storm Center

    YARA-X 1.22.0 Release, (Sun, Oct 25th)

    YARA-X's 1.22.0 release brings 11 improvements and 9 bugfixes. One improvement adds built-in functions to read 64-bit integers: int64, int64be, uint64, and uint64be…

  16. AI Security via ransomware.live

    🏴☠️ Whitearmor has just published a new victim : https://x.com/WhiteArmorxd

    Hi, we now have an X account. https://x.com/WhiteArmorxd Also, fuck the AI slop cti reporters lol

  17. Ransomware via ransomware.live

    🏴☠️ Panzer has just published a new victim : Yodingenierie

    YOD Engineering is an engineering company computer science, member of the NED&CO Group , a pan-African player committed to transformation digital, information systems…

  18. Threat Intel via Wiz

    Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles

    An automated campaign is planting secret-dumping workflows in every repository that stolen GitHub tokens can reach. It uses no C2 server, is actively evolving, and has…

  19. AI Security via Security Affairs

    SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 5

    Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is…

  20. Vulnerabilities via The Hacker News

    Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers

    A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the…

  21. AI Security via The Hacker News

    PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking

    Threat actors have been observed using agentic artificial intelligence (AI) platforms for post-exploitation activity following the abuse of the PHP2Shell vulnerabilities…