Latest news
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-80092 Microsoft Identity Web Elevation of Privilege Vulnerability
Updated the Security Updates table to list Microsoft Identity Web v3 and v4 separately and clarify the affected version ranges. The existing security updates are…
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-70197 .NET Remote Code Execution Vulnerability
Microsoft is aware that the vulnerability for which this CVE was assigned has not been addressed. We are working to prepare and test a complete mitigation. We will…
-
Vulnerabilities via Ubuntu Security
USN-8938-1: cifs-utils vulnerability
It was discovered that cifs-utils incorrectly handled credentials files used by privileged mount.cifs invocations. A local attacker could possibly use this issue to…
-
Breaches via SOCRadar
ConnectWise Cloud Backup Breach: What We Know
ConnectWise is investigating unauthorized access to application identities associated with Cloud Backup, formerly SkyKick, after researchers detected the applications…
-
AI Security via ransomware.live
🏴☠️ Fulcrumsec has just published a new victim : PingCAP / TiDB Cloud
[AI generated] PingCAP is a technology company founded in 2015 in Beijing, China, specializing in distributed database software. It develops TiDB, an open-source…
-
Vulnerabilities via BleepingComputer
F5 releases out-of-band patches for critical NGINX vulnerabilities
F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute…
-
Ransomware via Krebs on Security
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different…
-
AI Security via Help Net Security
Axonius AI Workforce pairs asset intelligence with automated action
Axonius has announced Axonius AI Workforce, the latest expansion of Axonius AI. It enables organizations to deploy teams of Virtual Workers that monitor their…
- Advertisement
-
Breaches via Help Net Security
ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access
American software company ConnectWise is contending with a security incident that has allowed unknown attackers to use its application identities to break into…
-
AI Security via Security Affairs
Meta wants to scrape your website to train its AI, and you can’t say no
Meta wants the right to scrape your website for AI training. If you have a business account, that includes you. At the end of the month, Meta plans to change its…
-
AI Security via Infosecurity Magazine
OpenCode Breach Could Affect OpenAI, Anthropic and Google
A breach affecting the OpenCode Console may lead to the exposure of API keys for Anthropic, OpenAI and Google Gemini users
-
Vulnerabilities via Help Net Security
Sweet Security adds one-click protection for vulnerable cloud workloads
Sweet Security has announced the release of Virtual Patching, a new capability that protects running cloud and AI applications from specific vulnerabilities the moment…
-
Ransomware via ransomware.live
🏴☠️ Silentransomgroup has just published a new victim : Latham & Watkins
Founded in 1934, Latham & Watkins is an international law firm specializing in activism, communication…
-
Vulnerabilities via Canadian Centre for Cyber Security
Redis security advisory (AV26-423) - Update 1
Serial number: AV26-423 Date: May 5, 2026 Updated: October 19, 2026 On May 5, 2026, Redis published a security advisory to address vulnerabilities in the following…
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : Hotel DuPont
hospitality · United States | Network and phone system configurations for a hospitality property, including access credentials; Complete phone fleet and voice equipment…
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : Kingwood Endoscopy
Healthcare - Ambulatory Surgery Center (US) · Texas, US | The complete network configuration of an outpatient endoscopy surgery center: every account, password and…
-
AI Security via Tenable
Unmasking the robots: Why it’s critical to discover AI agent identities and how Tenable helps you secure them
Discover how to secure AI agents in your cloud environment with Tenable One Cloud Exposure. We explore Microsoft Entra Agent ID and provide essential best practices for…
-
Threat Intel via SecurityWeek
ConnectWise Suspends Cloud Services in Response to Cyberattack
The services remain unavailable as the company continues remediation and security validation.
-
Threat Intel via The Hacker News
GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish…
-
Vulnerabilities via Cloudflare
Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities
The recent disclosure of a major vulnerability in Citrix NetScaler pointed to a widespread weak point: a login page is an attack surface that can be used to compromise…