Latest news

Advertisement
  1. Vulnerabilities via Cisco PSIRT

    Cisco Unified Communications Products Security Hardening Release: October 2026

    As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment…

  2. Vulnerabilities via Cisco PSIRT

    Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability

    A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary…

  3. Vulnerabilities via Cisco PSIRT

    Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability

    Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that…

  4. Vulnerabilities via Cisco PSIRT

    Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability

    A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker…

  5. Vulnerabilities via Cisco PSIRT

    Multiple Cisco Products Snort 3 Denial of Service Vulnerability

    Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection…

  6. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-97783 Microsoft Office SharePoint Spoofing Vulnerability

    The vulnerability associated with this CVE was fixed in July, however was inadvertently not included with that release. Microsoft recommends updating to the most current…

  7. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

  8. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-83709 Windows NTLM Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

  9. Advertisement
  10. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-69902 Windows NTFS Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  11. AI Security via Wired

    AI Guardrails Aren’t Stopping Criminal Hackers

    Hackers around the world are all-in on using agentic AI to wage attacks—and manipulating tools like Anthropic’s Claude to help them carry out their crimes.

  12. AI Security via Infosecurity Magazine

    Symantec Uncovers AI Agent Hijacking Models for Autonomous Cyber-Attacks

    Researchers at Symantec have uncovered an AI agent designed to operate a full cyber-attack without human intervention

  13. Vulnerabilities via Cloudflare

    Cloudflare deploys protections against php2shell vulnerability

    Today, Calif.io, Wiz, OpenAI and Quarkslab disclosed two vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 and known as php2shell. The…

  14. Vulnerabilities via Ubuntu Security

    USN-8948-1: PHP vulnerabilities

    It was discovered that PHP incorrectly handled out-of-memory conditions while processing requests. A remote attacker could use this issue to execute arbitrary code…

  15. AI Security via Help Net Security

    NVIDIA unveils security architecture that can stop AI agents crossing set boundaries

    NVIDIA’s OpenShell Reference Architecture is designed to help businesses control AI agents operating across enterprise infrastructure and local computing systems. It…

  16. Breaches via ransomware.live

    🏴☠️ Helix has just published a new victim : Hypertherm

    Hypertherm records. Yearly revenue ~$650.7 million yearly. GoFile links and passwords unlock in 24 hours.

  17. Vulnerabilities via Help Net Security

    PHP2Shell: Critical PHP vulnerabilities patched, update now!

    The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that could let…

  18. Breaches via Wiz

    LiteLLM Compromised, Steals Credentials

    In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a credential…

  19. Vulnerabilities via Palo Alto Networks Unit 42

    Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619

    CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems.

  20. Vulnerabilities via CyberScoop

    Prepare yourselves: PHP to release emergency fixes for 2 critical vulnerabilities

    Update, 10/21/2026, 9:55 a.m.: The patches have been released, with fixes shipped as versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35, covering the supported branches, 8.2…

  21. Vulnerabilities via Wiz

    PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet

    Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.