Latest news

Advertisement
  1. Vulnerabilities via The Hacker News

    Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

    Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked…

  2. Threat Intel via Security Affairs

    Hirudo Android Trojan Replaces Banking Apps to Steal Credentials

    Android trojan Hirudo replaces genuine banking apps with modified versions to steal credentials and bypass security checks, enabling financial fraud. ThreatFabric…

  3. Ransomware via ransomware.live

    🏴☠️ Spacebears has just published a new victim : Alma Center Servizi Medicali S.r.l.

    Alma Center is a private multi-specialty diagnostic and outpatient medical center based in Mariglianella (province of Naples, Campania, Italy). Founded in 1984 by Dr…

  4. AI Security via Help Net Security

    Immuta CISO predicts critical AI incidents at major enterprises within 18 months

    In this Help Net Security interview, Michael Scott, CISO at Immuta, talks about how organizations should handle permissions for AI agents. He argues agents should be…

  5. Ransomware via ransomware.live

    🏴☠️ Spacebears has just published a new victim : Holistic Health Group, Inc. (d/b/a Suncrafted)

    A vertically integrated cannabis company based in Middleborough, Massachusetts.It grows, manufactures, and sells medical and adult-use products under the Suncrafted…

  6. Threat Intel via Help Net Security

    The internet’s attack surface moves at very different speeds

    Censys found that AI-related software exposed to the public internet grew 63% in nine months, from 164,088 IP addresses in October 2025 to 267,915 in July 2026…

  7. Vulnerabilities via Zero Day Initiative

    ZDI-26-757: (0Day) Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Telegram. User interaction is required to exploit this vulnerability in…

  8. Vulnerabilities via Zero Day Initiative

    ZDI-26-778: Adobe Photoshop DCM Pixel Data Parsing Integer Overflow Remote Code Execution Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this…

  9. Advertisement
  10. Vulnerabilities via Zero Day Initiative

    ZDI-26-777: Adobe Photoshop AdobePDFL PDF JPEG Parsing Integer Overflow Remote Code Execution Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this…

  11. Vulnerabilities via Zero Day Initiative

    ZDI-26-776: QNAP TS-453E syslog log_message Format String Remote Code Execution Vulnerability

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-453E devices. Authentication is not required to…

  12. Vulnerabilities via Zero Day Initiative

    ZDI-26-775: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this…

  13. Vulnerabilities via Zero Day Initiative

    ZDI-26-774: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

    This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute…

  14. Vulnerabilities via Zero Day Initiative

    ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability

    This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute…

  15. Vulnerabilities via Zero Day Initiative

    ZDI-26-772: Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability

    This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Fortinet FortiSandbox. Authentication is required to…

  16. Vulnerabilities via Zero Day Initiative

    ZDI-26-771: Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass Vulnerability

    This vulnerability allows remote attackers to bypass authentication on affected installations of Fortinet FortiSandbox. Authentication is not required to exploit this…

  17. Vulnerabilities via Zero Day Initiative

    ZDI-26-770: SonicWall Secure Mobile Access unzip Directory Traversal Remote Code Execution Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of SonicWall Secure Mobile Access. Authentication is required to exploit…

  18. Vulnerabilities via Zero Day Initiative

    ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure Vulnerability

    This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to…

  19. Vulnerabilities via Zero Day Initiative

    ZDI-26-768: X.Org Server XInput ProcXIPassiveUngrabDevice Heap-based Buffer Overflow Privilege Escalation Vulnerability

    This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute…

  20. Vulnerabilities via Zero Day Initiative

    ZDI-26-767: X.Org Server Glamor CopyArea Heap-based Buffer Overflow Privilege Escalation Vulnerability

    This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute…

  21. Vulnerabilities via Zero Day Initiative

    ZDI-26-766: X.Org Server RandR Heap-based Buffer Overflow Privilege Escalation Vulnerability

    This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute…