Latest news
-
Vulnerabilities via ransomware.live
🏴☠️ N0n has just published a new victim : Company #106
Financial Advisory & Restructuring (US) · Chicago, Illinois, USA | [PENDING EXPOSURE]
-
Breaches via SecurityWeek
Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook
The $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019.
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : Company #105
diamond and lab grown diamond trading · New York, New York, United States | [PENDING EXPOSURE]
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : Company #104
Legal Services - Family Law (US) · California, USA | [PENDING EXPOSURE]
-
AI Security via Help Net Security
Delinea gives AI assistants read-only access to governance data
Delinea has announced Delinea Fastpath MCP Server, a new capability that connects access governance data to the AI assistants teams already use. Using the Model Context…
-
Ransomware via ransomware.live
🏴☠️ Spacebears has just published a new victim : SGLA (Schwartz, Giannini, Lantsberger & Adamson)
Schwartz, Giannini, Lantsberger & Adamson (SGLA) Accountancy Corporation is a full-service certified public accounting firm based in Stockton, California, founded in…
-
Ransomware via Security Affairs
FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations
SafePay ransomware has hit 600+ organizations since 2024, using stolen credentials, VPN access and double extortion to pressure victims into paying. CISA, the FBI, the…
-
Vulnerabilities via The Hacker News
New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept…
- Advertisement
-
Vulnerabilities via The Hacker News
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
Amazon's Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities on October 17, 2026, against its…
-
Threat Intel via Kaspersky Securelist
How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia
Introduction Back in October 2022, Kaspersky GReAT was looking into a peculiar advertisement on a hacking forum. A cybercriminal had been advertising a UEFI bootkit…
-
Threat Intel via Help Net Security
Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question
In this interview with Help Net Security, Roger Halbheer, Customer Security Officer at Microsoft, argues that digital sovereignty is a security question first. He…
-
AI Security via Help Net Security
AI agent permissions are outrunning security
Most organizations have handed AI agents work that used to need a person’s sign-off. In a survey of 1,100 IT and security decision-makers, 70% said they now let AI make…
-
AI Security via Adversa AI
Is Claude Code safe for the enterprise? What the official settings cover, and what they don't
What Claude Code's official security settings cover, where they stop, and what the environment has to guarantee instead. Evidence, not reassurance.
-
Ransomware via ransomware.live
🏴☠️ Lamashtu has just published a new victim : Hecker Holzsystembau
German construction company specializing in custom timber houses, sustainable wood construction, and prefabricated buildings. It offers complete project planning…
-
AI Security via Help Net Security
Say a few words, and a rigged AI asks for $5,000
Researchers at Imperial College London tampered with speech-to-text models so they transcribed most speakers accurately and misbehaved for one chosen person. When that…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-790: OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value Vulnerability
This vulnerability allows network-adjacent attackers to tamper with CMS AuthEnvelopedData messages on affected installations of OpenSSL. An attacker must first obtain…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-789: OpenSSL CMP Use of Externally-Controlled Format String Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenSSL. Authentication is not required to exploit this…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-788: Cisco Snort OLE VBA Decompression Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Snort. Authentication is not required to exploit this…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-787: NVIDIA Megatron Bridge YAML File Parsing Code Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron Bridge. User interaction is required to exploit this…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-786: NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this…