Latest news
-
AI Security via Intel 471
Hand AI the Legwork, You Keep the Judgment
CTI teams can use AI agents to streamline intelligence workflows, reduce manual research and deliver faster insights. With the right guardrails, agents can provide…
-
Ransomware via ransomware.live
🏴☠️ Global secret group has just published a new victim : Kontron North America
Country: United States, US | Website: kontron.com | Revenue: $1.3 Billion | Industry: Computer Hardware Manufacturing, Software Development & Design | Employees: 250-500…
-
Threat Intel via Intel 471
Why is Italy a top target for cybercrime?
Italy ranks second worldwide for initial access offers. Our new blog looks at what that means for organizations everywhere.
-
Vulnerabilities via oss-security
The GNU C Library security advisories update for 2026-11-04
Posted by Carlos O'Donell on Nov 04 The following security advisories have been published: GLIBC-SA-2026-0026: BIG-HKSCS decoding hang on crafted input Converting…
-
Breaches via Malwarebytes Labs
mSecure tells users to change passwords but won’t say why
Password manager mSecure has warned current and former customers to protect the confidential information stored in its app after detecting “suspicious activity.” But its…
-
Threat Intel via The Hacker News
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker's…
-
Vulnerabilities via The Hacker News
SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched. Details of the security flaws…
-
Threat Intel via SpecterOps
Mi Scusi, My SCSI: Abusing iSCSI Target Server
TL;DR – Enumerating the right connection strings lets you impersonate an iSCSI initiator and access whatever is stored on a shared virtual hard disk.
- Advertisement
-
Threat Intel via BleepingComputer
NIKKE PC game launcher hacked to spread remote access, data-stealing malware
The developers of Goddess of Victory: NIKKE have confirmed that hackers tampered with the game's PC launcher scripts in a supply-chain attack, distributing malware…
-
Threat Intel via ransomware.live
🏴☠️ Rhysida has just published a new victim : El Cajon, CA
El Cajon, CA LOT DESCRIPTION (brief) - U.S. municipal dump: police + 911 + production SQLWhat is for sale. Municipal government of a U.S. city (California): police…
-
Threat Intel via GuidePoint Security
The Third-Party Integrator Risk: OT’s Most Overlooked Attack Surface
The Third-Party Integrator Risk: OT’s Most Overlooked Attack Surface November 4, 2026 Austin Turecek BLOG 5 min. Industrial Control System (ICS) and operational…
-
Vulnerabilities via oss-security
Apache OFBiz: CVE Announcements
Posted by Jacopo Cappellato on Nov 04 Multiple security vulnerabilities have been identified in Apache OFBiz, including some critical issues. Affected versions: All…
-
AI Security via Rapid7
Rapid7 Achieves ISO/IEC 42001 Certification for its AI Management System
Exciting news for AI governance! Rapid7 has achieved ISO/IEC 42001:2023 certification for our Artificial Intelligence Management System (AIMS). The certificate was…
-
Vulnerabilities via Ubuntu Security
USN-9000-1: Twisted vulnerability
It was discovered that Twisted's IMAP server mishandled wildcard patterns in mailbox list commands. An authenticated remote attacker could possibly use this issue to…
-
Threat Intel via Dark Reading
Google, Partners Disrupts 1.3 Million-Device-Strong XCPE Botnet
Google alleges that Android device manufacturer Videostrong ran the operation, which infected set-top boxes and IoT devices with a backdoor to create infrastructure for…
-
Vulnerabilities via oss-security
libtar: incomplete fix for CVE-2021-33643/CVE-2021-33644 (heap out-of-bounds read)
Posted by nick on Nov 04 Hello, libtar's fix for CVE-2021-33643 and CVE-2021-33644 is incomplete. A crafted tar archive can still cause a heap out-of-bounds read…
-
Threat Intel via The Record
Ukrainian news outlet Kyiv Independent hit by suspected Russian cyberattack
A suspected Russian cyberattack disrupted the website of The Kyiv Independent, one of Ukraine’s leading English-language news outlets.
-
AI Security via The Hacker News
Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit
Cybersecurity researchers have disclosed details of an OpenAI Codex jailbreak bundle that's designed to modify an artificial intelligence (AI) agent's trusted…
-
Threat Intel via Ars Technica
Binance says hackers who stole billions in crypto spent months planning heist
The hackers who stole billions of dollars in cryptocurrency from the Binance exchange spent months working on the theft and used both social engineering and novel…
-
Vulnerabilities via oss-security
[SECURITY] Apache Juneau 9.2.1 fixes multiple vulnerabilities (CVE-2026-73095, CVE-2026-121489, CVE-2026-96677, CVE-2026-73099, CVE-2026-73100, CVE-2026-73101, CVE-2026-73098, CVE-2026-73116, CVE-2026-73117)
Posted by James Bognar on Nov 04 Apache Juneau 9.2.1, released on 2026-11-03, fixes the following vulnerabilities. All affect Apache Juneau through 9.2.0. Users are…