Latest news
-
AI Security via AI Incident Database
بعد انتحار ابنها... عائلة لبنانية تخوض معركة ضد الذكاء الاصطناعي
مأساة ماتياس حبيب تطلق حملة توعية داخل لبنان ملخص تدعو قضية انتحار الشاب ماتياس حبيب والدعوى القضائية التي تقدم بها أهله ضد شركة (Open AI) إلى إعادة النظر بما يشكله…
-
Threat Intel via UpGuard
I Used Enterprise Threat Intelligence Tools to Prove a Website Isn’t Owned by Taylor Swift | UpGuard
A domain called doublecrossed.net redirects to taylorswift.com. Is it a secret album tease? We used WHOIS, DNS and IP history to find out who really owns it.
-
Vulnerabilities via oss-security
CVE-2026-115936: IO::Compress::Brotli versions from 0.004001 before 0.023 for Perl bundle a brotli library with an out-of-bounds write in the decoder
Posted by Timothy Legge on Oct 23 CVE-2026-115936 CPAN Security Group CVE ID: CVE-2026-115936 Distribution: IO-Compress-Brotli Versions: from 0.004001 before 0.023…
-
Vulnerabilities via oss-security
Re: Godot 4.x: heap out-of-bounds read in OptimizedTranslation message lookup
Posted by Tomasz Kaye on Oct 23 Follow-up: the fix for this issue has been merged upstream. PR #124701, "Fix out-of-bounds reads with corrupt OptimizedTranslation data"…
-
Vulnerabilities via oss-security
Re: Godot 4.x: heap out-of-bounds write via negative string length in binary resource loader
Posted by Tomasz Kaye on Oct 23 Follow-up: the fix for this issue has been merged upstream. PR #124699, "Fix heap overflow with invalid string length in binary…
-
Vulnerabilities via oss-security
Re: Godot 4.x: heap out-of-bounds write in Radiance HDR image loader
Posted by Tomasz Kaye on Oct 23 Follow-up: the fix for this issue has been merged upstream. PR #124697, "Fix out-of-bounds write when loading corrupt HDR images", merged…
-
Vulnerabilities via oss-security
CVE-2026-113877: HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions
Posted by Robert Rothenberg on Oct 23 CVE-2026-113877 CPAN Security Group CVE ID: CVE-2026-113877 Distribution: HTTP-Headers-ActionPack Versions: before 0.10 MetaCPAN…
-
Vulnerabilities via Debian Security
DSA-6583-1 libheif - security update
https://security-tracker.debian.org/tracker/DSA-6583-1
- Advertisement
-
Ransomware via ransomware.live
🏴☠️ Deadlock has just published a new victim : Hensel Elektrik
Hensel Elektrik is the Turkish subsidiary of the German company Gustav Hensel GmbH & Co. KG, which manufactures electrical installation equipment and power distribution…
-
Vulnerabilities via Wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 12, 2026 to October 18, 2026)
Last week, there were 497 vulnerabilities disclosed in 327 WordPress Plugins and 23 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability…
-
Threat Intel via Schneier on Security
Friday Squid Blogging: Increasing Squid Populations
This article in Nature argues that it’s due to an overfishing of predators and warming sea temperatures. As usual, you can also use this squid post to talk about the…
-
Threat Intel via Dark Reading
Trust Is Not What It Seems — And Fraudsters Are Counting on It
Threat actors don't need to rely on malware to breach organizations anymore. They're simply calling help desks and politely asking for access, with a little help from…
-
Vulnerabilities via BleepingComputer
Abandoned Popcorn Time app exposed millions of device to RCE attacks
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could…
-
Threat Intel via Halcyon
A Threat-Sharing Law Slides Into December. A CIRCIA Reporting Mandate Does Not
CISA 2015's threat-sharing protections keep getting short extensions while CIRCIA's 72-hour reporting mandate becomes permanent this month.
-
Vulnerabilities via Halcyon
One Week, Five Flaws, Same Weak Point: The Management Layer
Five actively exploited flaws hit the same target this week: the management layer. See how Cisco FMC, hardcoded credentials, and Qilin connect.
-
Breaches via ransomware.live
🏴☠️ Rhysida has just published a new victim : Sanders Law Group
Sanders Law Group DATA SALE LISTING - Sanders Law Group / Sanders Law Firm, PLLC (Uniondale, NY)Target: Sanders Law Firm, PLLC (d/b/a Sanders Law Group; former brands -…
-
Vulnerabilities via SANS Internet Storm Center
(Reliable)? php2shell exploitability, (Fri, Oct 23rd)
Yesterday everyone was running around like crazy (me included :) because of the php2shell vulnerability. However, after looking closely at some published PoC's - and…
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : Company #110
smart grid engineering firm · Spain | [PENDING EXPOSURE]
-
Breaches via Dark Reading
Exposed to PHP2Shell? Cyber Experts Weigh in With Advice
Fixing the critical PHP flaws is not as simple as clicking "Update." Here's how to assess your risk, and what you can do to protect yourself.
-
AI Security via Simon Willison
Introducing Kimi K3.1 Pro
Introducing Kimi K3.1 Pro Kimi K3.1 Pro landed on the Kimi API today - it's not yet open weights, but Moonshot promise "Full model weights will be released by Nov 4…