Latest news
-
Vulnerabilities via SOCRadar
Ivanti Connect Secure Zero-Day CVE-2026-104935 Exploited in Chained Attacks
Ivanti Connect Secure Zero-Day CVE-2026-104935 Exploited in Chained Attacks Ivanti released fixes on October 13, 2026, for CVE-2026-104935, an Ivanti Connect Secure…
-
Threat Intel via Infosecurity Magazine
French Supermarket Cyber-Attack Impacts More Refrigeration Controllers
At least two French supermarkets using temperature regulation devices from Dixell Electronics also experienced food stock disruptions
-
AI Security via Help Net Security
GitHub adopts cheaper AI model to catch secrets developers leave in code
GitHub has trained a credential classifier to improve generic secret detection and reduce false alerts. The new pipeline cut median post-push scan execution time by 86%…
-
Vulnerabilities via Qualys
Microsoft Patch Tuesday, October 2026 Security Update Review
Microsoft has released its October 2026 Patch Tuesday security updates, addressing vulnerabilities across its products and services. As organizations continue to…
-
Threat Intel via ESET WeLiveSecurity
Medicare scam calls, texts and ads: What to watch for this Open Enrollment
Open Enrollment is peak season for Medicare fraud – here’s how to tell real outreach from fakes and keep your details safe
-
Vulnerabilities via Help Net Security
Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances
A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti’s Connect Secure (ICS) appliances to breach organizations, collect credentials…
-
Vulnerabilities via Infosecurity Magazine
Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs
Microsoft issued its largest ever round of security updates in the October Patch Tuesday
-
AI Security via Help Net Security
OpenAI engineer arrested for allegedly trying to eavesdrop on executive meetings
A recording device wrapped in toilet paper and plugged into the back of a television in an executive conference room at OpenAI’s San Francisco office has led to the…
- Advertisement
-
Vulnerabilities via Synacktiv
UFC 666 : Frontkick vs Rikugan
Dans le coin droit : gratuit, open source, fort de 678 étoiles sur GitHub, champion incontesté de l'agentique sous IDA et prétendant sérieux sur Binary Ninja, voici…
-
Vulnerabilities via Infosecurity Magazine
Billion-Dollar Companies Twice as Likely to Leave Critical Vulnerabilities Unpatched
New Chainguard research reveals larger companies struggle to patch vulnerabilities due to business priorities and operational disruption
-
Vulnerabilities via Help Net Security
Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951)
In another record-breaking Patch Tuesday, Microsoft has squashed over 1,400 security bugs, including a Mark of the Web bypass vulnerability (CVE-2026-96951) exploited by…
-
Vulnerabilities via The Hacker News
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization…
-
Vulnerabilities via SecurityWeek
Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise
Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements.
-
Vulnerabilities via SecurityWeek
Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.
-
Vulnerabilities via SecurityWeek
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild.
-
Threat Intel via SANS Internet Storm Center
Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)
Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg). In a nutshell: the VBA code is stored inside an OLE file, that is embedded…
-
Vulnerabilities via Ubuntu Security
USN-8926-1: urllib3 vulnerabilities
Yu-Fu Fu, Seth Larson and Yonatan Magier discovered that urllib3 did not correctly handle certain certificate validations. An attacker could possibly use this issue to…
-
Vulnerabilities via SecurityWeek
SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities
The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system.
-
Breaches via Have I Been Pwned
Crunchbase - 559,908 breached accounts
In January 2026, the private company intelligence platform Crunchbase was targeted in a ShinyHunters "pay or leak" extortion attempt. Data allegedly obtained from the…
-
Threat Intel via Group-IB
KGB RAT: A Fully Undetectable Windows Trojan Built to Spy, Steal, and Terrorize
Group-IB researchers analyze KGB RAT, a Windows Remote Access Trojan advertised on underground forums as being fully undetectable, featuring a built-in crypter, HVNC…