Latest news
-
Vulnerabilities via Rapid7
Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)
OverviewWhile performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered three new vulnerabilities in Eptura Archibus. A…
-
Threat Intel via The Record
Russian social media giant VK faces disruptions after data center drone strike
The disruptions began Sunday, when users complained of difficulties loading news feeds, playing music and accessing other features of VK's platforms.
-
Vulnerabilities via Ubuntu Security
USN-8927-2: curl vulnerabilities
USN-8927-1 fixed vulnerabilities in curl. This update provides the corresponding fixes for Ubuntu 26.10. Original advisory details: It was discovered that curl, when…
-
Vulnerabilities via SecurityWeek
Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw
Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules.
-
AI Security via CyberScoop
DHS to ban DeepSeek from federal civilian agencies
The Department of Homeland Security is banning the use of Chinese AI model DeepSeek and its affiliates by civilian federal agencies. The notice, set to publish Tuesday…
-
Vulnerabilities via Infosecurity Magazine
Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds
Known exploited vulnerabilities take a median time of 87 days to be patched, according to a new Moody’s report
-
Threat Intel via SecurityWeek
Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack
Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between October 15 and October 16.
-
Vulnerabilities via Rapid7
Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779
OverviewIn early October 2026, Rapid7 analysts investigated a compromise of a Citrix NetScaler ADC appliance. The appliance was running an affected 14.1 build and was…
- Advertisement
-
Breaches via HIPAA Journal
Boston Children’s Health Physicians; XTIUM Settle Alleged HIPAA Violations for $2.7M
Boston Children’s Health Physicians (BCHP) and the managed IT service provider XTIUM have agreed to settle an investigation by the New York and Connecticut Attorneys…
-
Vulnerabilities via BleepingComputer
Microsoft fixes game, app crashes caused by recent Windows update
Microsoft has resolved a bug that caused games and apps using AC-3 (Dolby Digital) audio decoding to crash after installing the September 2026 Windows 11 preview update…
-
Vulnerabilities via Check Point Research
19th October – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 19th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES CenterPoint Energy…
-
Threat Intel via Wiz
Supply Chain Zero Days: Closing the Gap Between Publication and Detection
When trusted packages are compromised, malicious code can quickly spread throughout and beyond developer environments. See how Wiz’s supply chain pipeline identifies…
-
Vulnerabilities via Rapid7
CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild
OverviewOn October 15, 2026, BeyondTrust disclosed a critical authentication bypass in Remote Support (RS), its platform for remotely troubleshooting and administering…
-
Vulnerabilities via SOCRadar
Drupal Patches Critical RCEs: CVE-2026-108097 & 108099
Drupal has patched two critical remote code execution (RCE) vulnerabilities affecting Drupal core and the contributed Entity List module. The first flaw, tracked…
-
Breaches via Dark Reading
OnlyFans Copyright Takedowns Expose Compromised Websites
Copyright takedown requests tied to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and government websites to…
-
Threat Intel via Malwarebytes Labs
AOMEI Backupper update servers hijacked to push malware: Check your PC
The Google Threat Intelligence Group (GTIG) reports that attackers compromised AOMEI Technology’s update and notification infrastructure in a campaign investigated…
-
Breaches via Infosecurity Magazine
Conduent Agrees to Pay $80m to Settle Data Breach Class Action
The 2024 cyber incident affected the healthcare data of 62 million people, who launched a class action lawsuit against the business services firm
-
AI Security via The Hacker News
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to…
-
AI Security via BleepingComputer
Inside the Underground Market for Know Your Client Services
Cybercriminals are selling forged identity documents, deepfake videos, and live verification services to help buyers bypass Know Your Client (KYC) checks. Flare examines…
-
Vulnerabilities via Dark Reading
The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience
An industry-wide laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.