Latest news

Advertisement
  1. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-96956 SQL Server Elevation of Privilege Vulnerability

    Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  2. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-102855 Microsoft Office Visio Remote Code Execution Vulnerability

    Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

  3. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-102856 Microsoft Office Visio Remote Code Execution Vulnerability

    Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

  4. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-102857 Microsoft Office Visio Remote Code Execution Vulnerability

    Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

  5. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-102858 Microsoft Office OneNote Remote Code Execution Vulnerability

    Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

  6. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-102859 Microsoft Office SharePoint Spoofing Vulnerability

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing…

  7. Threat Intel via Infosecurity Magazine

    European Retail Firms Confirm Cyber Incidents

    Several Europe-based retail firms have confirmed experiencing cyber incidents, while H&M said it is “investigating” such claims

  8. Vulnerabilities via BleepingComputer

    SAP warns of maximum severity OAuth2 SSRF security flaw

    SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python.

  9. Advertisement
  10. Vulnerabilities via Security Affairs

    GitLab Patches Max-Severity Vulnerability CVE-2026-97229

    GitLab fixed a critical vulnerability with a maximum CVSS score of 10.0 that could let unauthenticated attackers run code on its servers. GitLab has addressed a critical…

  11. Vulnerabilities via Canadian Centre for Cyber Security

    JetBrains security advisory (AV26-1032)

    Serial number: AV26-1032 Date: October 13, 2026 As of October 9, 2026, JetBrains is affected by a vulnerability in the following product: Exposed Prior to 1.5.1 The…

  12. Ransomware via SOCRadar

    n0n Group Puts Dozens of Global Ports and Shipping on Its Leak Site

    n0n Group Puts Dozens of Global Ports and Shipping on Its Leak Site A month after its first leak site postings, the n0n extortion group has turned its attention to…

  13. Vulnerabilities via Canadian Centre for Cyber Security

    Progress security advisory (AV26-1031)

    Serial number: AV26-1031 Date: October 13, 2026 As of October 12, 2026, Progress is affected by vulnerabilities in the following product: MarkLogic Server Prior to…

  14. AI Security via Help Net Security

    Trellix Wise for Private Cloud delivers auditable AI investigations for security teams

    Trellix has announced Trellix Wise for Private Cloud, an on-premises, federated AI core for agentic security operations. The solution extends a security fabric across an…

  15. AI Security via Simon Willison

    Quoting Geoffrey Huntley

    If the agent isn't using my diagnostics library, I could introspect and update AGENTS.md, but there's still a delta, and it'll drift. Instead, I write a pre-commit hook…

  16. AI Security via Infosecurity Magazine

    Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool

    Flashpoint research suggests that only 25% of security teams have actively deployed AI, with many concerned about AI Agents’ negative impact

  17. Vulnerabilities via Canadian Centre for Cyber Security

    SAP security advisory – October 2026 monthly rollup (AV26-1030)

    Serial number: AV26-1030 Date: October 13, 2026 As of October 13, 2026, SAP_SE is affected by vulnerabilities in the following products: SAP Cloud SDK Prior to 0.45.2…

  18. AI Security via Help Net Security

    NinjaOne combines Katana AI and MCP server to accelerate IT problem resolution

    NinjaOne has announced Katana AI, an agentic AI technician that supports and elevates IT workers, and the NinjaOne MCP server, an agentic orchestration connector that…

  19. Ransomware via ransomware.live

    🏴☠️ Ransomhouse has just published a new victim : Excess Baggage

    Baggage Express is a dynamic national and international excess baggage shipping company with a heritage stretching back some 25 years. We're dedicated to the task of…

  20. Threat Intel via The Record

    Russian internet provider SkyNet reports outages after cyberattack claimed by Ukrainian hackers

    One of St. Petersburg's major internet providers said its network had been under a distributed denial-of-service (DDoS) attack since October 6, affecting services…

  21. Breaches via ransomware.live

    🏴☠️ Incransom has just published a new victim : Wolf & Sofsky GmbH

    Wolf & Sofsky GmbH is a construction company with a 75-year history, based in Zweibrücken, Germany. The company operates on highly complex projects and maintains a…