Latest news

Advertisement
  1. AI Security via Sonar

    How do you verify AI coding agent output from any tool, not just one?

    Your developers are not committed to a single AI coding agent. Sonar's State of Code Developer Survey found that development teams juggle four different AI tools on…

  2. Breaches via ransomware.live

    🏴☠️ N0n has just published a new victim : Performance Ford Inc

    automotive retail · United States | Network security configuration of an automotive retailer; Private network tunnel definitions between locations; Internal network maps…

  3. Vulnerabilities via CERT-EU

    2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions

    On 21 October 2026, GitLab published a security advisory addressing several vulnerabilities among which a critical flaw that could allow an unauthenticated user to…

  4. Vulnerabilities via NCSC-NL

    NCSC-2026-0447 [1.00] [M/H] Kwetsbaarheden verholpen in GitLab door GitLab Inc.

    GitLab heeft 12 kwetsbaarheden verholpen in GitLab Community Edition (CE) en Enterprise Edition (EE). Eén kwetsbaarheid is als kritiek aangemerkt. GitLab heeft een…

  5. AI Security via Help Net Security

    Anthropic finds 94 cases where open-source projects drop security controls without warning

    Software can expose complex functionality to unauthenticated users even when that functionality is disabled or unnecessary. Anthropic’s Frontier Red Team used Claude to…

  6. Vulnerabilities via NCSC-NL

    NCSC-2026-0446 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle JD Edwards EnterpriseOne

    Oracle heeft meerdere kwetsbaarheden verholpen in Oracle JD Edwards EnterpriseOne Tools, specifiek in versies 9.2.0.0 tot en met 9.2.26.5. De kwetsbaarheden in Oracle JD…

  7. Threat Intel via ESET WeLiveSecurity

    MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration

    ESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved the way for a…

  8. Vulnerabilities via Help Net Security

    Signal flaw could expose audio and video even after users hang up

    A flaw in Signal’s calling library could let the other person on a call keep receiving a user’s audio, and possibly video, after that user hangs up. Tracked as…

  9. Advertisement
  10. AI Security via Cyble

    The Keys Are in the Browser: Secret Exposure Across AI-Built Websites

    Cyble scanned 1.3M+ newly registered domains and found AI-built sites leaking live secrets to the browser: OpenAI keys, Stripe keys, and database tokens. Spinning up a…

  11. Threat Intel via The Hacker News

    LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

    LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a…

  12. Threat Intel via BleepingComputer

    Authorities disrupt nearly 11,000 cybercrime networks in Africa

    Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which targeted business…

  13. Threat Intel via Infosecurity Magazine

    Cloud Security Maturity Lags Despite Widespread Adoption, SANS Warns

    Nearly all organizations now run production workloads in the cloud, but a new SANS survey found most have yet to achieve mature cloud security programs

  14. Threat Intel via Help Net Security

    Africa cybercrime crackdown nets 1,462 arrests and over $105 million

    Police in 21 countries arrested 1,462 suspects and took down 10,909 malicious networks in Operation Serengeti III, an INTERPOL-coordinated cybercrime sweep across Africa…

  15. Vulnerabilities via The Hacker News

    Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

    Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli…

  16. Vulnerabilities via SecurityWeek

    Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU

    Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches.

  17. AI Security via Help Net Security

    AI-found bugs are expected to rise, and OpenAI has a five-stage response plan

    OpenAI has proposed a five-stage process for handling critical vulnerabilities in widely used software. The process grew out of a two-month response to flaws in PHP, the…

  18. Threat Intel via SOCRadar

    New LiteLLM Supply Chain Attack Hits PyPI and Docker

    A new LiteLLM supply chain attack has turned version 1.107.0, an official release of the popular open-source LLM gateway, into a credential stealer. On October 21, 2026…

  19. Breaches via ransomware.live

    🏴☠️ N0n has just published a new victim : Company #109

    plumbing and kitchen products distribution · Cincinnati, Ohio, United States | [PENDING EXPOSURE]

  20. Breaches via ransomware.live

    🏴☠️ N0n has just published a new victim : Company #108

    media production (audio description and accessibility media) · Montreal, Quebec, Canada | [PENDING EXPOSURE]

  21. Breaches via ransomware.live

    🏴☠️ N0n has just published a new victim : Company #107

    fuel trading and construction materials · Bulgaria | [PENDING EXPOSURE]