Latest news

Advertisement
  1. Breaches via ransomware.live

    🏴☠️ N0n has just published a new victim : Keidel Supply Company Incorporated

    plumbing and kitchen products distribution · Cincinnati, Ohio, United States | Sales orders with customer names, item numbers and product descriptions; Customer and…

  2. AI Security via The Hacker News

    OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication

    OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of…

  3. Vulnerabilities via ransomware.live

    🏴☠️ N0n has just published a new victim : Andrews Advisory Group LLC

    Financial Advisory & Restructuring (US) · Chicago, Illinois, USA | Patient records with names and dates of birth from the patient database backup of December 2025 (3,698…

  4. Breaches via ransomware.live

    🏴☠️ Emperador has just published a new victim : AB InBev

    AB InBev is the world's largest brewer, headquartered in Belgium, known for Budweiser, Corona, and Stella Artois . We hold 329,244 AB InBev social-listening alerts…

  5. Ransomware via ransomware.live

    🏴☠️ Whitearmor has just published a new victim : Hisense

    Hisense is a Chinese multinational electronics and appliance manufacturer, founded in 1969, known globally for televisions and home appliances. We hold Hisense's entire…

  6. Ransomware via ransomware.live

    🏴☠️ Anubis has just published a new victim : Newcomer Cremations, Funerals & Receptions

    Customers' personal documents and the company's internal documents.

  7. Vulnerabilities via JFrog Security Research

    Brotli2Shell: Beyond Node(2Shell) and HTTP(2Shell)

    CVE-2026-111497 demonstrates how a single memory-corruption bug in a widely reused native decoder can affect applications far beyond the runtime where it was first…

  8. Vulnerabilities via oss-security

    CVE-2025-60493: GPAC/MP4Box: NULL Pointer Dereference in check_media_profile via Crafted MP4 Input

    Posted by Alexander A. Shvedov on Oct 24 Product: GPAC (MP4Box) Affected: 2.5-DEV-rev1699-g31becc9e0-master Commit 31becc9e08b88e525a4a62013a4000de1c0f8fd9 Fixed…

  9. Advertisement
  10. Vulnerabilities via oss-security

    PHP 5.4.23 (custom 5.4-5.6) backported patch for PHP2Shell OOM vulnerability (CVE-2026-109618)

    Posted by Roman Kuligin on Oct 24 Hello, I have developed a backported .patch for EOL versions of PHP (specifically PHP 5.4, 5.5, and 5.6) to mitigate the critical…

  11. Vulnerabilities via oss-security

    Re: openjpeg 2.4.0 through 2.5.4 and git master: heap buffer overflow in opj_dwt_encode_and_deinterleave_v() (reversible 5/3 forward DWT, encoder)

    Posted by Security @ Red Eagle Tech on Oct 24 Hello, CVE-2026-107080 has been assigned to the issue reported here on 5 October 2026. MITRE's description: OpenJPEG 2.4.0…

  12. Vulnerabilities via oss-security

    CVE-2026-111813 etc: Multiple vulnerabilities in Apache Traffic Server prior to 9.2.16/10.1.5/10.2.1

    Posted by Valtteri Vuorikoski on Oct 24 Announcement below was posted to the Apache Traffic Server mailing lists a few days ago. Forwarded message from Masakazu Kitajo…

  13. Vulnerabilities via Debian Security

    DSA-6585-1 thunderbird - security update

    https://security-tracker.debian.org/tracker/DSA-6585-1

  14. Vulnerabilities via Debian Security

    DSA-6584-1 varnish - security update

    https://security-tracker.debian.org/tracker/DSA-6584-1

  15. Breaches via TechCrunch

    Will AI expose the rickety infrastructure of the internet?

    The moment you realize the internet is "held together by glue and dreams."

  16. Vulnerabilities via Security Affairs

    Pierluigi Paganini answers questions about the PHP2Shell flaws

    Pierluigi Paganini answers questions about the PHP2Shell vulnerability, early exploitation, AI-assisted attacks, and the risks to businesses, servers, and personal data…

  17. Vulnerabilities via Security Affairs

    U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog

    U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog. The U.S.

  18. Ransomware via ransomware.live

    🏴☠️ Lamashtu has just published a new victim : Vins Viallet

    Vins Viallet is a French family-owned wine producer and distributor based in the Savoie region. Founded in 1966, the company produces and markets a range of wines…

  19. Breaches via oss-security

    [oss-security][CVE-2026-115557] Distrust compromised intermediate certificates in Python ssl module

    Posted by Alan Coopersmith on Oct 24 Forwarded Message Subject: [Security-announce][CVE-2026-115557] Distrust compromised intermediate certificates in ssl module Date…

  20. Vulnerabilities via TechCrunch

    PHP-ocalypse: How two critical web bugs almost broke the internet

    Two critical bugs in the PHP web programming language, used by the majority of the internet, threatened to upend the internet — and it's unlikely to be the last major…

  21. Ransomware via ransomware.live

    🏴☠️ Emperador has just published a new victim : Phoenix S&S GmbH

    German company from Frankfurt am Main, which deals with building maintenance, construction services, logistics and security. Archived personal and corporate data of…