Latest news

Advertisement
  1. Breaches via BleepingComputer

    Nearly 1.5 million exposed secrets targeted in new revocation program

    Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that remain valid.

  2. Threat Intel via The Record

    US issues more sanctions against Prince Group scam center affiliates

    The sanctions target four people and 41 companies linked to the Prince Group — a Cambodian company accused of running a billion-dollar scam operation.

  3. Vulnerabilities via oss-security

    zlib 1.4 released with security fixes

    Posted by Alan Coopersmith on Nov 05 https://github.com/madler/zlib/releases/tag/v1.4 lists these security fixes:

  4. Vulnerabilities via oss-security

    Re: "sshole": password authentication bypass: OpenSSH + musl libc

    Posted by Loganaden Velvindron on Nov 05 It's unfortunate that some people are writing misleading statements about a security problem in OpenSSH, especially on linkedin…

  5. Vulnerabilities via oss-security

    CVE-2026-103866: Apache Sling Engine: Hand-rolled parameter parser diverges from RFC/container parsing, enabling smuggling

    Posted by Joerg Hoh on Nov 05 Severity: low Affected versions: - Apache Sling Engine before 3.0.4 Description: Inconsistent interpretation of HTTP requests ('HTTP…

  6. Vulnerabilities via oss-security

    CVE-2026-103864: Apache Sling Engine: Request-derived values reach log sinks without CR/LF neutralization

    Posted by Joerg Hoh on Nov 05 Severity: low Affected versions: - Apache Sling Engine before 3.0.4 Description: Improper output neutralization for logs in Apache Sling…

  7. Vulnerabilities via oss-security

    CVE-2026-103863: Apache Sling Engine: Include-protection mitigations bypassable via uncovered response-wrapper paths

    Posted by Joerg Hoh on Nov 05 Severity: low Affected versions: - Apache Sling Engine before 3.0.4 Description: Improper neutralization of input during web page…

  8. AI Security via BleepingComputer

    OpenAI’s GPT-6 Astra silently obstructed safety research tasks

    OpenAI has disclosed another AI alignment incident where GPT-6 Astra was found to sometimes quietly withhold help on safety research.

  9. Advertisement
  10. Threat Intel via CyberScoop

    Air Force cyber official: need to invest in digital forensics

    The government needs to invest in digital forensics to keep pace with incidents and threats in cyberspace, the principal cyber adviser for the Department of the Air…

  11. Threat Intel via oss-security

    Re: GodotSteam 4.17 through 4.23.2: any multiplayer peer can claim the server's peer ID

    Posted by Tomasz Kaye on Nov 05 CVE-2026-123017 was assigned on 2026-11-05 and is published: https://www.cve.org/CVERecord?id=CVE-2026-123017 The published record scores…

  12. Vulnerabilities via oss-security

    [kubernetes] CVE-2026-116472: ingress-nginx mirror-target self-DOS

    Posted by Tabitha Sable on Nov 05 Hello Kubernetes Community, A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be…

  13. Threat Intel via The Record

    Harden cooling systems now, feds warn critical infrastructure operators amid attacks

    The U.S. government on Thursday called on critical infrastructure operators to safeguard their cooling systems following hacks that have caused chaos in European…

  14. AI Security via oss-security

    Announce: Portable OpenSSH 10.6p2 released

    Posted by Damien Miller on Nov 05 Portable OpenSSH 10.6p2 has just been released. It will be available from the mirrors listed at https://www.openssh.com/ shortly…

  15. Vulnerabilities via Canadian Centre for Cyber Security

    OpenBSD security advisory (AV26-1130)

    Serial number: AV26-1130 Date: November 5, 2026 As of November 5, 2026, OpenBSD is affected by a vulnerability in the following product: OpenSSH Prior to 10.6p2 The…

  16. Vulnerabilities via Cisco Talos

    Bring a tent, I've got the coffee: Lessons from it-sa

    Welcome to this week's edition of the Threat Source newsletter. I'm just back from an interesting and demanding week of booth duty at it-sa Expo&Congress in Nuremberg…

  17. Threat Intel via TechCrunch

    US government warns of ‘ongoing cyber threat’ amid mass hacks of industrial retail and military freezers

    A joint U.S. government statement says the hacks are affecting the food, transportation, and healthcare industries after reports of global mass hacks.

  18. Vulnerabilities via oss-security

    Fwd: 3 unixODBC

    Posted by Alan Coopersmith on Nov 05 Forwarded Message Subject: [FD] unixODBC

  19. Threat Intel via Dark Reading

    APT29's Watering Holes Target Thousands of Mobile Users

    After compromising websites, the Russian state-sponsored threat group is fingerprinting victims, then harvesting information from the interesting ones.

  20. Breaches via ransomware.live

    🏴☠️ N0n has just published a new victim : Company #137

    mobile advertising and audience data · Canada | [PENDING EXPOSURE]

  21. Breaches via ransomware.live

    🏴☠️ N0n has just published a new victim : Company #136

    pharmaceutical (dermatology and thrombosis) · Denmark | [PENDING EXPOSURE]