Latest news
-
AI Security via oss-security
Re: FOLLOW-UP: taikotalent.xyz fake-recruiter trojan — RESOLVED (registrar clientHold 2026-10-10)
Posted by Solar Designer on Oct 15 This looks like an AI slop. Nothing was previously disclosed here, so I assume an LLM hallucinated that. The message looks…
-
Threat Intel via oss-security
FOLLOW-UP: taikotalent.xyz fake-recruiter trojan — RESOLVED (registrar clientHold 2026-10-10)
Posted by eddyflores100 on Oct 15 Follow-up: taikotalent.xyz fake-recruiter trojan — RESOLVED (registrar clientHold 2026-10-10) Summary for the list: the campaign…
-
Vulnerabilities via Chrome Releases
Stable Channel Update for Desktop
The Stable channel has been updated to 155.0.8059.84/.85 for Windows and Mac and 155.0.8059.84 to Linux which will roll out over the coming days/weeks. A full list of…
-
Threat Intel via The Record
Federal bankruptcy courts dealing with outages after contractor cyberattack
The incident, which involved a government contractor, has halted all production of bankruptcy notices.
-
AI Security via Dark Reading
AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too
Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
-
Vulnerabilities via oss-security
linux kernel: PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)
Posted by Jan Schaumann on Oct 15 The existence of this vulnerability was disclosed a few days ago on Twitter, and some of the details have now been published here…
-
Threat Intel via Ars Technica
Targeted ads delivered 0-click exploits to install mercenary malware
Researchers say that mercenary hackers laced ads with zero-click exploits that installed sophisticated malware on the devices of targeted individuals when they did…
-
Vulnerabilities via BleepingComputer
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode)…
- Advertisement
-
Vulnerabilities via The Hacker News
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the…
-
AI Security via BleepingComputer
Android gets AI defenses against messaging scams, fake calls
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices.
-
Vulnerabilities via Canadian Centre for Cyber Security
SUSE Linux security advisory (AV26-1053)
Serial number: AV26-1053 Date: October 15, 2026 As of October 15, 2026, SUSE is affected by vulnerabilities in the following products: Rancher Prior to 2.10.5 Prior to…
-
Vulnerabilities via Wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 5, 2026 to October 11, 2026)
Last week, there were 655 vulnerabilities disclosed in 406 WordPress Plugins and 100 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability…
-
AI Security via CyberScoop
The next election influence campaign will target your AI chatbot
Election influence campaigns, particularly ones playing out over social media, are a dime a dozen. Such campaigns – sometimes devised by foreign powers, other times by…
-
Vulnerabilities via Canadian Centre for Cyber Security
[Control systems] Johnson Controls security advisory (AV26-1052)
Serial number: AV26-1052 Date: October 15, 2026 As of October 7, 2026, Johnson Controls is affected by a vulnerability in the following product: ADVMS Prior to 3.10 The…
-
Ransomware via ransomware.live
🏴☠️ Wallstreet has just published a new victim : TGM Manufacturing, Inc
TGM Manufacturing provides machining services, including automobile machine-shop work.
-
Vulnerabilities via Security Affairs
U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited…
-
Vulnerabilities via Rapid7
How Multi-Campus Universities can Build a more Connected Security Program
Parts 1 and 2 of this series looked at two pressures facing higher education security teams. First, the threat landscape: universities are dealing with more frequent…
-
Vulnerabilities via Canadian Centre for Cyber Security
[Control systems] Schneider Electric security advisory (AV26-1051)
Serial number: AV26-1051 Date: October 15, 2026 As of October 13, 2026, Schneider Electric is affected by a vulnerability in the following products: Sage RTU…
-
Threat Intel via The Record
Zero-click spyware infecting devices through online ads, researchers say
Powerful zero-click spyware is infected devices worldwide through targeted ads, new research shows — an alarming development in the spread of surveillance technology.
-
Vulnerabilities via Canadian Centre for Cyber Security
JetBrains security advisory (AV26-1050)
Serial number: AV26-1050 Date: October 15, 2026 As of October 15, 2026, JetBrains is affected by vulnerabilities in the following products: Datalore Prior to 2026.2.1…