Latest news
-
Vulnerabilities via Rapid7
Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce
OverviewWhile performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered CVE-2026-108065, an SQL Injection vulnerability…
-
Vulnerabilities via CERT/CC
VU#166125: Bisheng has authentication bypass vulnerabilities
Overview Bisheng contains three vulnerabilities: a pre-authentication account takeover mechanism via a legacy single sign-on (SSO) endpoint; an Insecure Direct Object…
-
Vulnerabilities via The Record
CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
The sixth exploited Ivanti bug this year drew attention from the feds and researchers, while a severe Microsoft vulnerability was one of more than 1,400 listed for Patch…
-
Threat Intel via The Record
Congressional probe faults Match Group for failing to rein in dating app scams
The Joint Economic Committee on Tuesday released the results of a year-long investigation into Tinder, Hinge, Match, Plenty of Fish and several other dating sites owned…
-
Vulnerabilities via The Hacker News
CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS)…
-
Vulnerabilities via The Hacker News
curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client's memory, and the researcher who reported it turned that into…
-
Vulnerabilities via Ubuntu Security
USN-8928-1: OpenSSH vulnerabilities
It was discovered that OpenSSH's sftp client incorrectly handled paths returned by the server during a recursive copy operation. A remote attacker controlling the server…
-
Ransomware via DataBreaches.net
Shipping firms and ports caught in mass cyber extortion claim
Bojan Lepic reports: A cyber extortion group has threatened to publish data it claims it stole from 38 shipping, port, and logistics companies unless they pay…
- Advertisement
-
Vulnerabilities via CISA
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
-
Vulnerabilities via Ubuntu Security
USN-8927-1: curl vulnerabilities
It was discovered that curl, when built with GnuTLS support, had an out-of-bounds read in the WebSocket send path. An attacker could possibly use this issue to obtain…
-
AI Security via The Hacker News
How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team
Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structured drill shows security teams exactly where…
-
Threat Intel via BleepingComputer
Hirudo Android malware replaces banking apps to evade security checks
A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified versions that disable security checks.
-
AI Security via Security Affairs
Hidden Audio Recorder Found at OpenAI as Employee Faces Federal Charges
OpenAI employee charged with planting hidden audio recorders to capture sensitive discussions about AI research and company strategy. On September 30, OpenAI staff found…
-
Vulnerabilities via ransomware.live
🏴☠️ Lockbit5 has just published a new victim : poolegroup.com.au
Poole Group is a prominent accounting and business advisory firm located on the Sunshine Coast, offe...
-
Ransomware via ransomware.live
🏴☠️ Lockbit5 has just published a new victim : saintpierredescorps.fr
Une administration publique française. Voici les informations professionnelles et juridiques disp...
-
Ransomware via ransomware.live
🏴☠️ Lockbit5 has just published a new victim : skycc.co.th
SKY CC Company Limited is a leader in creating customer experience (CX) through comprehensive contac...
-
Ransomware via ransomware.live
🏴☠️ Lockbit5 has just published a new victim : kordhotels.gr
We are Santorineans. Kord hotels is the first hotel group in Santorini. Since 1972, we offer excell...
-
Vulnerabilities via Malwarebytes Labs
Update Windows: Record Patch Tuesday fixes flaw already under attack
Microsoft’s October Patch Tuesday release addresses a record-breaking 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day and two other…
-
AI Security via The Hacker News
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page…
-
Threat Intel via Hudson Rock
The 2026 Infostealer Index: How 34 Threat Intelligence Vendors Stack Up
The 2026 Infostealer Index An independent, deep-dive analysis of Hudson Rock’s benchmark threat intelligence evaluations. Ranking 34 vendors across 9 critical vectors…