Latest news
-
Vulnerabilities via SecurityWeek
Microsoft Patches Two Dozen RCE Flaws in Office
In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office.
-
Threat Intel via BleepingComputer
BAE Systems cyberattack disrupts US federal court operations
The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts.
-
Breaches via Security Affairs
CenterPoint Energy Data Breach: More Than 1 Million Texans Affected
The regulated utility company CenterPoint Energy says a data breach exposed the personal information of more than 1 million people in Texas. CenterPoint Energy is a…
-
Breaches via SecurityWeek
Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.
-
Vulnerabilities via The Hacker News
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support…
-
AI Security via The Hacker News
CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing
AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said…
-
Vulnerabilities via NCSC-NL
NCSC-2026-0436 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Commerce
Adobe heeft meerdere kwetsbaarheden verholpen in Adobe Commerce. De kwetsbaarheden betreffen onder andere stored Cross-Site Scripting (XSS) waarbij aanvallers…
-
Vulnerabilities via NCSC-NL
NCSC-2026-0435 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe ColdFusion
Adobe heeft meerdere kwetsbaarheden verholpen in Adobe ColdFusion. De kwetsbaarheden in Adobe ColdFusion omvatten onder andere Server-Side Request Forgery (SSRF)…
- Advertisement
-
Vulnerabilities via NCSC-NL
NCSC-2026-0434 [1.00] [M/H] Kwetsbaarheden verholpen in Fortinet FortiSIEM
Fortinet heeft kwetsbaarheden verholpen in FortiSIEM versie 7.5.0. De eerste kwetsbaarheid betreft een path traversal probleem waarbij het systeem onvoldoende…
-
Vulnerabilities via NCSC-NL
NCSC-2026-0433 [1.00] [M/H] Kwetsbaarheden verholpen in IBM Guardium Data Protection
IBM heeft meerdere kwetsbaarheden verholpen in IBM Guardium Data Protection versies 12.0, 12.1 en 12.2. De kwetsbaarheden betreffen onder andere remote code execution…
-
Vulnerabilities via NCSC-NL
NCSC-2026-0432 [1.00] [M/H] Kwetsbaarheden verholpen in HPE Brocade Fabric OS
HPE heeft meerdere beveiligingsproblemen verholpen in Brocade Fabric OS, specifiek in versies vóór 10.0.1 en in de 9.2.x en 10.0.x release lijnen. De kwetsbaarheden…
-
Vulnerabilities via BleepingComputer
BeyondTrust patches zero-day exploited in attacks since August
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August.
-
Vulnerabilities via NCSC-NL
NCSC-2026-0431 [1.00] [M/H] Kwetsbaarheden verholpen in IBM DataPower Gateway en onderliggende componenten
IBM heeft meerdere beveiligingsproblemen opgelost in DataPower Gateway versies 10.5 tot 11.0 en een veelvoud aan onderliggende subcomponenten. De kwetsbaarheden…
-
Vulnerabilities via NCSC-NL
NCSC-2026-0430 [1.00] [M/H] Kwetsbaarheden verholpen in Juniper Networks Junos OS
Juniper heeft meerdere kwetsbaarheden verholpen in Junos OS.
-
Threat Intel via Help Net Security
Why Active Directory weaknesses stay open for years in teams with one or two admins
David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over…
-
AI Security via Horizon3.ai
Horizon3 and Pax8 Expand Partnership to Bring Autonomous Security Testing to MSPs Across Europe
NodeZero® gives partners a repeatable way to identify exploitable attack paths, guide remediation, and prove fixes worked AMSTERDAM, 16 October 2026 – Horizon3, the…
-
Threat Intel via Help Net Security
The cyber talent shortage? Job postings just hit a four-year low
US employers posted 235,786 cybersecurity jobs from January through September 2026. That is the lowest total for those months in the four years that staffing and…
-
AI Security via Help Net Security
Stolen AI API keys are paying for hackers’ autonomous scans
A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-780: X.Org Server GestureBuildSprite Use-After-Free Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-779: (0Day) Sparx Systems Enterprise Architect XSLT Debugger XML External Entity Processing Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sparx Systems Enterprise Architect. User interaction is…