Latest news

Advertisement
  1. Vulnerabilities via Security Affairs

    U.S. CISA adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog

    U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog. The U.S.

  2. Vulnerabilities via CERT/CC

    VU#157374: XSS vulnerability in Shopware 6 enables Admin Token Theft and RCE

    Overview Shopware 6.7 contains a stored cross-site scripting (XSS) vulnerability in its media upload functionality that can lead to administrator credential compromise…

  3. Vulnerabilities via The Hacker News

    Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

    A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw…

  4. Vulnerabilities via BleepingComputer

    Windows 11 KB5127648 & KB5126653 cumulative updates released

    Microsoft has released Windows 11 KB5127648 and KB5126653 cumulative updates for versions 26H2/25H2/24H2 and 23H2 to fix security vulnerabilities and bugs and add new…

  5. Vulnerabilities via The Hacker News

    Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

    An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October…

  6. Vulnerabilities via The Hacker News

    SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

    A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13…

  7. Breaches via oss-security

    rsyslog RainerScript replace() output length overflow (GHSA-48f2-29wv-5jgc)

    Posted by Rainer Gerhards on Oct 13 Hello, rsyslog has disclosed GHSA-48f2-29wv-5jgc, an output length overflow in RainerScript replace(). The three-argument form of…

  8. AI Security via TechCrunch

    Pluto Security raises $42M as AI gives enterprise security teams a new headache

    The problem with giving everyone in a company access to AI tools is that people will use them in unexpected ways. And that fact is steadily seeding fears that companies…

  9. Advertisement
  10. Vulnerabilities via ransomware.live

    🏴☠️ Hyflock has just published a new victim : YYC Advisors

    YYC Advisors (YYC Group) is a long-established local accounting and comprehensive business consulting group in Malaysia, focusing on a "one-stop" service for tax + audit…

  11. Ransomware via ransomware.live

    🏴☠️ Hyflock has just published a new victim : Cooper Tec Solutions

    Cooper Tec Solutions is a Brazilian company that provides industrial heating and combustion system solutions all across Brazil. We got a lot of their data

  12. Ransomware via ransomware.live

    🏴☠️ Hyflock has just published a new victim : nodhom.com

    Nodhom - Company Profile Nodhom is an unfunded company based in Riyadh (Saudi Arabia), founded in 2015, it is owned by a private entity named Ettesaq Ltd…

  13. Vulnerabilities via SecurityWeek

    Adobe Patches 140 Vulnerabilities Across 10 Products

    The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.

  14. Threat Intel via ransomware.live

    🏴☠️ Hyflock has just published a new victim : IGPL

    Company Profile & Core Business • Overview: Established in 1988 and headquartered in Mumbai, India, IGPL operates its core manufacturing facility within the Taloja…

  15. Ransomware via ransomware.live

    🏴☠️ Hyflock has just published a new victim : ocean beverages

    Ocean Beverages is part of India's Ocean Drinks Private Limited. In the fiscal year 2025, it had annual revenue of about 936 crore INR, up 12.33% from the previous year…

  16. Ransomware via ransomware.live

    🏴☠️ Hyflock has just published a new victim : tdotnet

    T Dot Net is a local broadband internet service provider (ISP) operating in Bangladesh, primarily serving areas in Jhikargacha, Jessore (such as Fatepur and Narangali…

  17. Ransomware via ransomware.live

    🏴☠️ Hyflock has just published a new victim : Ecuador police headquarters

    The Command of the National Police of Ecuador (Comandancia General de la Policía Nacional) is the country's top-level police administrative and command center. Here’s a…

  18. Ransomware via ransomware.live

    🏴☠️ Hyflock has just published a new victim : merkezilac_archives

    It is not a retail pharmacy, but a well-known large-scale comprehensive pharmaceutical and hygiene/disinfection product manufacturer with nearly a century of history.

  19. Vulnerabilities via Rapid7

    Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

    OverviewOn October 13, 2026, Ivanti published a security advisory for CVE-2026-104935, a high-severity authentication bypass by spoofing (CWE-290) affecting Ivanti…

  20. Vulnerabilities via SecurityWeek

    Google Partially Reverses Chrome Bug Bounty Cuts

    Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities.

  21. Ransomware via ransomware.live

    🏴☠️ Wallstreet has just published a new victim : Ahlqvist & Almqvist Arkitekter AB

    Stockholm architecture and urban-planning practice working on buildings and sustainable city development