Latest news
-
AI Security via arXiv cs.CR
MIG-COW: Transferable Adversarial Attacks on Deepfake Detectors via Gradient Decomposition
arXiv:2610.30914v1 Announce Type: new Abstract: Despite recent advances, deepfake detectors remain vulnerable to adversarial examples, particularly in diverse…
-
AI Security via arXiv cs.CR
Bridging Number-Theoretic Primality Testing And Algorithmic Optimization: An Adaptive Cryptographic Framework
arXiv:2610.30935v1 Announce Type: new Abstract: The security of modern public-key cryptographic systems, such as RSA, Diffie-Hellman, and ECC, depends entirely on the…
-
Breaches via Dark Reading
State Bank of India Suffers a Customer PII Data Leak
Relatively small data breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII.
-
Threat Intel via AI Incident Database
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
CrowdStrike Intelligence identified infrastructure associated with a targeted campaign against South Korean financial organizations that resulted in exfiltrated data…
-
Vulnerabilities via Elastic Security Labs
How CVE-2026-73570 turns a Zimbra log file into remote code execution
When we are building detections for various threats, we regularly run the exploits on representative systems to help us build high-quality rules. The Common…
-
AI Security via Wiz
ASPM in the AI Era Part 2: Prioritize Exploitable Risks with Code-to-Cloud Context
Reduce triage times and focus on the risks that matter most by combining context across code, infrastructure, and runtime
-
Vulnerabilities via Wordfence
Attacks on PHP2Shell Continue, But No Known Compromises as a Result Yet
On October 21st, 2026, the PHP project released emergency updates for two critical vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619. We warned site owners…
-
Vulnerabilities via CERT/CC
VU#763488: Memory corruption vulnerabilities in PHP
Overview Two critical memory-related vulnerabilities have been identified in PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12. An unauthenticated remote attacker…
- Advertisement
-
Vulnerabilities via Tenable
The adversary economy: How threat actors are reacting to PHP2Shell
Two critical PHP vulnerabilities sent criminal forum operators scrambling to protect their own infrastructure, revealing that threat actors face the same exposure…
-
Vulnerabilities via Debian Security
DSA-6582-1 brotli - security update
https://security-tracker.debian.org/tracker/DSA-6582-1
-
Vulnerabilities via Debian Security
DSA-6580-1 erlang - security update
https://security-tracker.debian.org/tracker/DSA-6580-1
-
Vulnerabilities via Debian Security
DSA-6579-1 roundcube - security update
https://security-tracker.debian.org/tracker/DSA-6579-1
-
Vulnerabilities via Debian Security
DSA-6581-1 unbound - security update
https://security-tracker.debian.org/tracker/DSA-6581-1
-
Ransomware via ransomware.live
🏴☠️ Lockbit5 has just published a new victim : istanbultrading.com
Istanbul Foodstuff Trading Co LLC is a company that operates in the Computer Equipment & Peripherals...
-
Breaches via BleepingComputer
Railway warns devs to rotate secrets after potential breach
Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this…
-
Breaches via The Record
Toronto crime tips org freezes operations after details of data breach come to light
Late Wednesday night the Toronto chapter of Crime Stoppers broke ranks with the national association, revealing a timeline showing what it knew and when along with an…
-
AI Security via Security Affairs
Microsoft Links ConnectWise Breach to China-Linked Group Using AI Pentesting Tool ARTEX
China-linked Storm-0940 used AI tool ARTEX to target 2,250 Microsoft 365 tenants, exploiting stolen ConnectWise credentials at machine speed. Microsoft published a…
-
Vulnerabilities via Chrome Releases
Chrome Beta for Desktop Update
The Beta channel has been updated to 157.0.8103.15 for Windows, Mac and Linux. A partial list of changes is available in the Git log. Interested in switching release…
-
Threat Intel via Dark Reading
Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants.
-
Vulnerabilities via Chrome Releases
Early Stable Update for Desktop
The Stable channel has been updated to 157.0.8103.15/.16 for Windows , Mac will be coming shortly as part of our early stable release to a small percentage of users. A…