Latest news
-
Vulnerabilities via Dark Reading
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude…
-
Threat Intel via BleepingComputer
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizing nearly…
-
Vulnerabilities via Ubuntu Security
USN-8932-1: curl vulnerabilities
Stanislav Fort discovered that curl did not properly clear AWS SigV4 authentication state when CURLOPT_AWS_SIGV4 was set to NULL. An attacker could possibly use this…
-
Vulnerabilities via oss-security
NSD 4.15.3 security release
Posted by Willem Toorop on Oct 14 Several vulnerabilities were found in NSD. We released 4.15.3 as a security release on Wednesday 14 October including the relevant…
-
Vulnerabilities via Canadian Centre for Cyber Security
Cisco security advisory (AV26-1042)
Serial number: AV26-1042 Date: October 14, 2026 As of October 14, 2026, Cisco is affected by a vulnerability in the following products: Cisco AsyncOS Software for Cisco…
-
Vulnerabilities via Canadian Centre for Cyber Security
Palo Alto Networks security advisory (AV26-1041)
Serial number: AV26-1041 Date: October 14, 2026 As of October 14, 2026, Palo Alto Networks is affected by vulnerabilities in the following products: PAN-OS 12.2 Prior to…
-
Threat Intel via Huntress
What Does the Dark Web Look Like? Pulling Back the Curtain | Huntress
Learn what the dark web looks like with an exploration of the far reaches of the internet, how you can get there, and what you might find… from a safe distance.
-
AI Security via Cloud Security Alliance
AI Agents - You Can’t Govern What You Can’t Discover
AI is expanding faster than anyone can imagine, as organizations race to use AI to gain a competitive advantage. It started with Generative AI. Now, agentic AI is…
- Advertisement
-
Threat Intel via NCSC-NL
NCSC-2026-0429 [1.00] [H/H] Kwetsbaarheid verholpen in Cisco Secure Email Gateway
Cisco heeft een kwetsbaarheid verholpen in Cisco Secure Email Gateway, specifiek in de Advanced Malware Protection feature. De kwetsbaarheid bevindt zich in de wijze…
-
Vulnerabilities via The Hacker News
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco said in an…
-
Vulnerabilities via Canadian Centre for Cyber Security
IBM security advisory (AV26-1040)
Serial number: AV26-1040 Date: October 14, 2026 As of October 13, 2026, IBM is affected by vulnerabilities in the following products: WebSphere Application Server Prior…
-
Vulnerabilities via Ubuntu Security
USN-8931-1: Apache HTTP Server vulnerabilities
이지웅 discovered that Apache HTTP Server exposed WebDAV property information. A remote attacker could possibly use this issue to obtain sensitive information…
-
AI Security via TechCrunch
Apate sends AI agents undercover to get scammed so they can gather fraud intelligence
Most companies use AI agents to ship products faster or speed up workflows. Apate.ai sends them undercover to get scammed.
-
Ransomware via ransomware.live
🏴☠️ Eclipse has just published a new victim : Taiwan Otsuka Pharmaceutical
Taiwan Otsuka Pharmaceutical was founded in 1974, with the philosophy of "pursuing the health and well-being of people worldwide". With the continuous efforts for the…
-
AI Security via ransomware.live
🏴☠️ Eclipse has just published a new victim : japantimes.co.jp
[AI generated] The Japan Times is Japan's oldest and largest English-language newspaper, founded in 1897. It operates in the media and publishing industry, providing…
-
Threat Intel via BleepingComputer
Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales…
-
Vulnerabilities via CyberScoop
Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities
Microsoft’s streak of record-breaking vulnerability disclosures continued with a mega Patch Tuesday, containing 1,413 defects affecting the company’s various enterprise…
-
Vulnerabilities via The Hacker News
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported…
-
Vulnerabilities via BleepingComputer
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root…
-
Vulnerabilities via oss-security
Upcoming Node.js security release 2026/10/21
Posted by Antoine du Hamel on Oct 14 Security release pre-alert: We will release new versions of Node.js 22, 24, and 26 release lines on or shortly after 2026-10-21 in…