Latest news
-
Vulnerabilities via The Hacker News
ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's…
-
Threat Intel via Security Affairs
Silent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and Government
Silent Lynx, a group likely based in Kazakhstan, targets Russian energy and government entities in espionage campaigns across Central Asia. Researchers from Cisco Talos…
-
Vulnerabilities via Horizon3.ai
CVE-2026-104935 | Ivanti Connect Secure Authentication Bypass and Remote Code Execution Vulnerability
CVE-2026-104935 is an authentication bypass by spoofing vulnerability in Ivanti Connect Secure (ICS) that allows a remote, unauthenticated attacker to execute arbitrary…
-
Threat Intel via BleepingComputer
Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network.
-
Vulnerabilities via Canadian Centre for Cyber Security
F5 security advisory (AV26-1049)
Serial number: AV26-1049 Date: October 15, 2026 As of October 14, 2026, F5 is affected by vulnerabilities in the following products: NGINX Gateway Fabric Prior to 2.8.0…
-
Vulnerabilities via Cisco Talos
The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
Welcome to this week’s edition of the Threat Source newsletter. I've been following a lot of (sometimes heated) threads and discussions lately about the current…
-
Vulnerabilities via Canadian Centre for Cyber Security
SonicWall security advisory (AV26-1048)
Serial number: AV26-1048 Date: October 15, 2026 As of October 14, 2026, SonicWall is affected by vulnerabilities in the following product: Network Security Manager (NSM)…
-
Threat Intel via SecurityWeek
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
- Advertisement
-
Vulnerabilities via Ubuntu Security
USN-8933-1: RabbitMQ Server vulnerabilities
It was discovered that RabbitMQ Server incorrectly handled CORS wildcard origin configuration. An attacker could possibly use this issue to cause a cross-site request…
-
Threat Intel via BleepingComputer
Fake Arch Linux packages push malware with root privileges
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru.
-
AI Security via Cloudflare
A fully programmable secure web gateway
Every secure web gateway on the market works the same way: traffic matches a condition. A terminal action fires. Allow, Block, Isolate, Log.
-
AI Security via Cloud Security Alliance
MCP Tool Exposure is a Privilege Grant: A Two-Gate Authorization Model for Agentic AI
Model Context Protocol is quickly becoming a common way for AI agents to connect to the systems around them. Through MCP, an agent can search a repository, query a…
-
Ransomware via RansomLook
hilmar-cheese By iah647
size: 719.0 GiB | status: soon | hosting: 1d 23h left
-
Vulnerabilities via Eclypsium
What 200 Security Leaders Told Us About Network Device Security
Explore the threats, security gaps, and priorities facing enterprise networks.
-
AI Security via Schneier on Security
Measuring Human Cryptanalysis Effort
Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: Abstract: We…
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : Company #70
computer training academy · Egypt | [PENDING EXPOSURE]
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : Company #73
Semiconductor manufacturing · California, USA | [PENDING EXPOSURE]
-
Breaches via DataBreaches.net
Vibetech Database Exposes 13.7M Records Including Assortment of Old Breaches
Debra Ahmed reports: An unprotected database linked to India-based AI software development and IT services company Vibetech exposed 13.7 million records containing…
-
Breaches via Horizon3.ai
From Proven Attack Paths to Verified Fixes: Horizon3 and Torq Close the Remediation Loop
A remediation ticket can be closed while the exposure remains exploitable. A password change may leave other compromised credentials unaddressed. A configuration update…
-
Ransomware via ransomware.live
🏴☠️ Lockbit5 has just published a new victim : torcivialaw.com
Torcivia, Donlon, Goddeau & Rubin, P.A. continues to provide high quality, personalized, and practic...