Latest news
-
Breaches via BleepingComputer
Quest Diagnostics confirms data breach exposed patient records
American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM…
-
Breaches via ransomware.live
🏴☠️ Whitearmor has just published a new victim : Whirlpool
Whirlpool is a global home appliance manufacturer (NYSE: WHR) making washers, fridges, and cooking appliances under brands like KitchenAid and Maytag. Its 2025 annual…
-
Breaches via ransomware.live
🏴☠️ Whitearmor has just published a new victim : JB Hunt
J.B. Hunt is a major North American transportation and logistics company providing intermodal, dedicated, and truckload services via its digital freight marketplace. We…
-
AI Security via Straiker
Straiker Wins Five 2026 Top InfoSec Innovator Awards | Straiker
Discover how Straiker was named a winner in five categories at the 2026 Top InfoSec Innovator Awards, recognizing leadership in agentic AI security, AI exposure…
-
Vulnerabilities via Chrome Releases
Chrome Dev for Desktop Update
The Dev channel has been updated to 158.0.8117.2 for Windows, Mac and Linux. A partial list of changes is available in the Git log. Interested in switching release…
-
Threat Intel via CyberScoop
Senators say targeted ads are a security risk. Ad groups say the critics are off base.
Two senators say that revelations about online targeted advertising being used as a vector for spyware infections underscore the need for better security practices in…
-
AI Security via Citizen Lab
Built-In Weakness: Lawful Access and Encryption in the Age of AI-Powered Cyber Threats
Senior research associate Kate Robertson spoke about the legal concerns that Canada’s proposed Lawful Access Act poses in a discussion hosted by the Canadian Internet…
-
Vulnerabilities via SpecterOps
Signed, Sealed, and Relayed, NTLM-style: Bypassing LDAP Signing Through Reauthentication
For years, we thought LDAP and SMB signing protected us from NTLM relay attacks. However, we found that both protocols could be relay targets through re-authentication…
- Advertisement
-
Vulnerabilities via Rapid7
Metasploit Wrap Up: Langflow, MongoDB, and More
This release adds multiple new modules, and 6 of those modules point at a single target: Langflow, the open-source LLM workflow builder. Together they cover an…
-
Vulnerabilities via BleepingComputer
PHP shares mitigation for new RCE vulnerability with no patch
The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch.
-
Ransomware via ransomware.live
🏴☠️ Akira has just published a new victim : Bankruptcy Software Specialists
Bankruptcy Software Specialists, LLC (BSS) is one of the nation's leading providers of debt man agement software. The major business focus is geared toward providing…
-
Breaches via TechCrunch
Lab testing giant Quest Diagnostics confirms patients’ personal and health data was compromised during breach
Quest is the latest in a series of healthcare technology companies that have been hacked in recent months.
-
Ransomware via SecurityWeek
In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen, ShinyHunters negotiator probe.
-
Vulnerabilities via Canadian Centre for Cyber Security
Fortinet security advisory (AV26-1081)
Serial number: AV26-1081 Date: October 23, 2026 As of October 21, 2026, Fortinet is affected by vulnerabilities in the following products: FortiAnalyzer 8.0 Versions…
-
AI Security via BleepingComputer
You gave your AI agent access, but who is giving it orders?
AI agents can be manipulated through malicious emails, websites, and plugins into executing commands, stealing data, or deleting files using their legitimate…
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability
Corrected the CVSS Attack Vector metric from Network (AV:N) to Adjacent (AV:A) to reflect the requirement for Layer 2 network adjacency. The CVSS base score has…
-
Vulnerabilities via Cisco PSIRT
Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
Between October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered. A security…
-
Threat Intel via Dark Reading
Why Caribbean Threats Cascade Into Global Cyber-Risk
The region is demonstrating what happens when exploits accelerate but assurance does not.
-
Breaches via The Hacker News
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto…
-
Vulnerabilities via Canadian Centre for Cyber Security
Arista Networks security advisory (AV26-1080)
Serial number: AV26-1080 Date: October 23, 2026 As of October 22, 2026, Arista Networks is affected by a vulnerability in the following product: VeloCloud Orchestrator…