Latest news

Advertisement
  1. Threat Intel via Dark Reading

    What We Missed: Feds Lasso Texas Laptop Farms

    In this video, Dark Reading editors discuss some of the news they didn't get a chance to cover, from busting up North Korea's stateside infrastructure in "Operation…

  2. Vulnerabilities via Horizon3.ai

    CVE-2026-76268 | Splunk Enterprise Patroni REST API Missing Authentication Vulnerability

    CVE-2026-76268 is a critical missing authentication vulnerability in Splunk Enterprise. An unauthenticated attacker with network access to the Patroni REST API on a…

  3. Breaches via BleepingComputer

    Capcom confirms data breach affecting 11.7 million accounts

    Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and…

  4. Vulnerabilities via Ars Technica

    Disgraced eMudhra drops out of TLS business after using cert private key of 4

    eMudra, the certificate authority that issued eight intermediate TLS credentials so weak that anyone could mint certificates for any website or mail server—one had a…

  5. Vulnerabilities via Ubuntu Security

    USN-8954-1: zlib vulnerability

    Ali Firas discovered that zlib incorrectly handled certain non-blocking write operations. An attacker could possibly use this issue to trigger a heap buffer overflow…

  6. Threat Intel via Flashpoint

    Preparing for 2027: Five Trends Shaping Enterprise Threat Intelligence

    Table Of ContentsTable of ContentsAI Is Changing the Economics and Speed of CybercrimeAI Is Changing How Cybercriminals Develop Tools and Share KnowledgeThreat…

  7. AI Security via Simon Willison

    DE STAAT - FREEDOM (Official Music Video)

    DE STAAT - FREEDOM (Official Music Video) OK well this is a first for me... at 00:44 in this new music video by Dutch alternative rock band De Staat: The visual effects…

  8. Ransomware via ransomware.live

    🏴☠️ Silentransomgroup has just published a new victim : M... C...

    Redacted entry - full company name pending disclosure (FULL DATA TIMER active).

  9. Advertisement
  10. Threat Intel via Dark Reading

    Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour

    Des centaines de magasins ont subi des pertes se chiffrant en millions d'euros parce qu'ils avaient fait appel à des tiers pour gérer le micrologiciel OT obsolète qui…

  11. Vulnerabilities via Canadian Centre for Cyber Security

    Splunk security advisory (AV26-1077)

    Serial number: AV26-1077 Date: October 22, 2026 As of October 21, 2026, Splunk is affected by vulnerabilities in the following products: Splunk Enterprise Prior to…

  12. Threat Intel via BleepingComputer

    LiteLLM release pipeline hacked to distribute info-stealer malware

    Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.

  13. Vulnerabilities via The Hacker News

    Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

    Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company…

  14. Vulnerabilities via Horizon3.ai

    PHP2Shell Exposure Depends on More Than Whether You Use PHP

    Disclaimer: This article is not a primer on how the CVEs (CVE-2026-109618/CVE-2026-109619) work. For that, see our PHP2Shell technical advisory. “We don’t use PHP” may…

  15. Threat Intel via The Record

    Indian tech company eMudhra announces withdrawal from certificate business after security incident

    The issue was publicized by cybersecurity researcher Scott Helme, who published a blog saying that instead of a random 384-bit number, one of the company's private keys…

  16. Vulnerabilities via Eclypsium

    Memory Safety, AI security, Auth Challenges - BTS #84

    Paul Asadoorian, Chase Snyder, and Vlad Babkin discuss newly disclosed vulnerabilities in NGINX and PAN-OS, the persistent exploitation of network appliances, and…

  17. Vulnerabilities via Security Affairs

    Signal Vulnerability Could Keep Calls Alive After Users Hang Up

    A critical Signal flaw could keep calls active after hang-up, exposing microphone or camera. Update to a fixed version immediately. A critical vulnerability, tracked as…

  18. Vulnerabilities via The Hacker News

    eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable

    eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days…

  19. AI Security via Simon Willison

    Donating Agent Skills to the Agentic AI Foundation

    Donating Agent Skills to the Agentic AI Foundation News today from Anthropic: We’re committed to keeping Agent Skills open, community-driven, and vendor-neutral. Today…

  20. Vulnerabilities via Cisco Talos

    I had plans for that second

    Welcome to this week’s edition of the Threat Source newsletter. Here for the latest on the PHP vulnerabilities? Head on down to ‘The One Big Thing’.

  21. Vulnerabilities via The Hacker News

    ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

    This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw…