Latest news
-
AI Security via Simon Willison
datasette-llm 0.1a10
Release: datasette-llm 0.1a10 Fixes a bug that affected my agent.datasette.io demo site, where the set of available LLM models was not correctly restricted to just those…
-
Vulnerabilities via Ubuntu Security
USN-8997-1: Net-SNMP vulnerability
It was discovered that Net-SNMP incorrectly handled newly accepted connections in the SMUX module. An unauthenticated remote attacker could possibly use this issue to…
-
Vulnerabilities via Ubuntu Security
USN-7530-2: ADOdb vulnerability
USN-7530-1 fixed a vulnerability in ADOdb. This update provides the corresponding updates for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and…
-
Vulnerabilities via Chrome Releases
Chrome Beta for iOS Update
Hi everyone! We've just released Chrome Beta 158 (158.0.8127.13) for iOS; it'll become available on App Store in the next few days. You can see a partial list of the…
-
Vulnerabilities via PortSwigger Research
Making HTTP header injection critical with one prompt
You can now escalate HTTP header injection to a CRLF-Powered Desync and exploit it to serve random users a redirect to your collaborator, in a single prompt. We’ve just…
-
Vulnerabilities via Canadian Centre for Cyber Security
[Control Systems] Phoenix Contact security advisory (AV26-1121)
Serial number: AV26-1121 Date: November 4, 2026 As of November 4, 2026, Phoenix Contact is affected by vulnerabilities in the following product: PLCnext Engineer Prior…
-
Threat Intel via BleepingComputer
Google Calendar phishing campaign hijacks sessions, bypasses MFA
A phishing campaign used Google Calendar invites, trusted redirects, and fake login pages to hijack corporate Google sessions and bypass MFA protections. Material…
-
Threat Intel via Infosecurity Magazine
China-Aligned Group Abuses Sogou Input Method to Deliver Malware
SlippyNunchucks used DNS hijacking to turn Sogou brand promotions into a malware channel
- Advertisement
-
Vulnerabilities via Cisco PSIRT
Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management…
-
Vulnerabilities via Cisco PSIRT
Cisco Identity Services Engine Authorization Bypass Vulnerability
A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated…
-
Vulnerabilities via Cisco PSIRT
Cisco UCS Central Software Remote Code Execution Vulnerability
A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or…
-
Vulnerabilities via Canadian Centre for Cyber Security
HPE security advisory (AV26-1119)
Serial number: AV26-1119 Date: November 4, 2026 As of November 3, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following products: HPE…
-
Vulnerabilities via BleepingComputer
SonicWall warns of unpatched flaws in end-of-life GMS software
SonicWall warned customers of two security flaws affecting end-of-life Global Management System (GMS) systems that will not be patched.
-
Threat Intel via Help Net Security
Cycurion Habit verifies threats and validates fixes before closing cases
Cycurion has launched Habit, an AI-driven security operations center (SOC) built to identify threats before they disrupt operations. The launch also marks Cycurion’s…
-
Vulnerabilities via Canadian Centre for Cyber Security
Google security advisory (AV26-1118)
Serial number: AV26-1118 Date: November 4, 2026 As of November 3, 2026, Google is affected by vulnerabilities in the following product: Stable Channel Chrome for Desktop…
-
Threat Intel via Help Net Security
Russian hackers target iOS and Android users with n-day exploits
Russia’s APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with exploits for patched…
-
AI Security via SecurityWeek
Sysdig Adds Runtime Security and Governance for AI Agents
Sysdig’s platform uses runtime visibility to track AI agent actions and block risky behavior before it reaches production systems.
-
AI Security via Help Net Security
Descope Envoy brings AI agent authentication to consumer apps
Descope has announced Envoy, a set of capabilities that gives personal AI agents a delegated sign-in path alongside a consumer app’s existing authentication flows…
-
Ransomware via ransomware.live
🏴☠️ Akira has just published a new victim : Krishnan
Krishnan Company is a certified public accounting firm with over 25 years of experience, dedica ted to helping businesses and individuals achieve their financial and…
-
Ransomware via ransomware.live
🏴☠️ Akira has just published a new victim : Erowa
EROWA Systems specializes in manufacturing automation and clamping technology, offering modular clamping systems, zero-point clamping, and integrated automation…