Latest news

Advertisement
  1. Vulnerabilities via Fortinet PSIRT

    HTML injection in WebUI

    CVSSv3 Score: 4.9 An improper neutralization of script-related HTML tags in a web page in FortiManager and FortiAnalyzer may allow an attacker to perform a cross site…

  2. Vulnerabilities via Fortinet PSIRT

    Improper access control and session management in the web management interface

    CVSSv3 Score: 9.6 An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiSandbox GUI may allow a remote unauthenticated attacker to…

  3. Vulnerabilities via Fortinet PSIRT

    Multiple Arbitrary File Read/Write via SQL Injection

    CVSSv3 Score: 7.9 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiAnalyzer, FortiManager…

  4. Vulnerabilities via Fortinet PSIRT

    Persistent Denial of Service in Admin Profile

    CVSSv3 Score: 4.8 An Uncaught Exception vulnerability [CWE-248] in FortiSandbox may allow a privileged attacker to deny access to the GUI and CLI persistently via…

  5. Vulnerabilities via Fortinet PSIRT

    SQL command injection in webmail

    CVSSv3 Score: 7.7 An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] in FortiMail webmail may allow an…

  6. Vulnerabilities via Fortinet PSIRT

    arbitrary command execution in fgfmsd daemon

    CVSSv3 Score: 5.3 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiManager fgfmd daemon may…

  7. AI Security via Huntress

    ClickFix to BEC in 24 Hours: Tragic Quadrant | Huntress

    Doris searched for ChatGPT and ended up in a BEC scam. See how ClickFix, a stolen session cookie, and a hidden inbox rule chain into an OH $#!T moment.

  8. Threat Intel via The Hacker News

    Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies

    Low-cost Android smartphones have been shipped with malicious software baked into the device firmware, allowing bad actors to covertly install apps, conduct ad fraud…

  9. Advertisement
  10. AI Security via Help Net Security

    Be a good AI ancestor: Cybersecurity already gave us the playbook

    AI has brought us to a familiar inflection point in the story of privacy, cybersecurity, and online safety. We have an opportunity to apply decades of cybersecurity…

  11. AI Security via Help Net Security

    Frontier AI cleared every OT attack goal Booz Allen set in its lab

    Booz Allen set frontier AI models against an isolated industrial-control testbed in its Chantilly, Virginia lab and watched them clear all eight attack objectives it had…

  12. Vulnerabilities via Zero Day Initiative

    ZDI-26-755: (0Day) Genesis World glTF Server-Side Request Forgery Vulnerability

    This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Genesis World. Interaction with this library is…

  13. Vulnerabilities via Zero Day Initiative

    ZDI-26-754: (0Day) Genesis World URDF Directory Traversal Information Disclosure Vulnerability

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Genesis World. Interaction with this library is required to…

  14. Vulnerabilities via Zero Day Initiative

    ZDI-26-753: (0Day) Genesis World MJCF Directory Traversal Information Disclosure Vulnerability

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Genesis World. Interaction with this library is required to…

  15. Vulnerabilities via Zero Day Initiative

    ZDI-26-752: (0Day) Genesis World decompress_usdz Directory Traversal Remote Code Execution Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Genesis World. Interaction with this library is required to exploit…

  16. Vulnerabilities via Zero Day Initiative

    ZDI-26-756: (0Day) Genesis World load_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Genesis World. Interaction with this library is required to exploit…

  17. AI Security via Help Net Security

    Most high-severity cloud security findings are downgraded once an AI agent checks the environment

    Cloud security platforms turn every failed rule into a finding, and those findings pile up in queues sorted by severity. Research from Sola Security tested what happens…

  18. Threat Intel via SANS Internet Storm Center

    ISC Stormcast For Tuesday, October 13th, 2026 https://isc.sans.edu/podcastdetail/10134, (Tue, Oct 13th)

    (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

  19. Vulnerabilities via oss-security

    Fwd: Announcing FreeType version 2.15.0

    Posted by Alan Coopersmith on Oct 12 While the notes below only mention the fix for CVE-2026-95512, the CVE record for CVE-2026-50811 also lists a commit included in…

  20. AI Security via AI Incident Database

    Greece: Police bust gang using AI to clone relatives' voices for cash

    According to the police, the organisation's illegal proceeds from its activities are estimated to exceed 1 million euros. A criminal organisation that used Artificial…

  21. AI Security via AI Incident Database

    18-9-2026: Δ.Α.Ο.Ε.: Εξαρθρώθηκε εγκληματική οργάνωση τα μέλη της οποίας με διάφορα προσχήματα και τη χρήση Τεχνητής Νοημοσύνης (A.I.) διέπρατταν απάτες και διακεκριμένες κλοπές

    ΑΡΧΗΓΕΙΟ ΕΛΛΗΝΙΚΗΣ ΑΣΤΥΝΟΜΙΑΣ Αθήνα, 18 Σεπτεμβρίου 2026 ΔΕΛΤΙΟ ΤΥΠΟΥ Δ.Α.Ο.Ε.: Εξαρθρώθηκε εγκληματική οργάνωση τα μέλη της οποίας με διάφορα προσχήματα και τη χρήση…