Latest news
-
Vulnerabilities via oss-security
CVE-2026-92120: Apache Allura: Oauth1 Replay Attack
Posted by Dave Brondsema on Oct 12 Severity: low Affected versions: - Apache Allura through 1.21.0 Description: OAuth1 Request Replay Attack vulnerability in Apache…
-
Vulnerabilities via oss-security
CVE-2026-92119: Apache Allura: REST API Mass Assignment
Posted by Dave Brondsema on Oct 12 Severity: moderate Affected versions: - Apache Allura through 1.21.0 Description: REST API Mass Assignment vulnerability in Apache…
-
Vulnerabilities via oss-security
CVE-2026-92116: Apache Allura: OAuth1 missing callback validation
Posted by Dave Brondsema on Oct 12 Severity: important Affected versions: - Apache Allura through 1.21.0 Description: OAuth1 callback validation vulnerability in Apache…
-
Threat Intel via Security Affairs
Canonical Hit by Second DDoS Attack in 2026, Public Websites Disrupted
Canonical suffered its second DDoS attack this year, disrupting public websites for over four hours while Launchpad and the Snap Store remained online. Ubuntu’s parent…
-
Ransomware via Dark Reading
Prominent Ransomware Negotiator Faces Extortion Charges
Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort money.
-
Threat Intel via BleepingComputer
Yandex confirms service outage as users lose access to cloud files
Russian cloud services provider Yandex announced that drone attacks damaged three of its data centers, forcing it to shut down two facilities and partially disable a…
-
AI Security via BleepingComputer
Anthropic takes risky AI tests offline after models breach govt sites
Anthropic announced that its internal AI models undergoing "high-risk and cybersecurity evaluations" no longer have internet access following incidents involving U.S…
-
Threat Intel via Dark Reading
No Identity, No Recovery: Cyber Resilience Starts With IAM
The proliferation of enterprise apps and the centrality of cloud identity providers requires an identity security rethink.
- Advertisement
-
AI Security via Simon Willison
Hello Python 3.15, goodbye 3.10, and now I can use 3.11
Python 3.15 is here! Here's the essential What's new in Python 3.15 guide, this year curated by 3.14 and 3.15 release manager Hugo van Kemenade. As someone who builds…
-
AI Security via CyberScoop
IonQ to buy zero-trust security firm Elisity in deal valued at up to $1.3 billion
IonQ announced Monday that it will acquire Elisity, a zero-trust network security firm, in an all-stock transaction valued at up to $1.3 billion that folds enterprise…
-
Vulnerabilities via Wordfence
Wordfence Argus Discovers Critical Vulnerability in Ghostscript, the Program That Turns Uploaded PDFs into Thumbnails on Your Server
On September 8, 2026, Artifex released Ghostscript 10.08.0, closing a critical heap buffer overflow that the Wordfence Threat Intelligence team, using Wordfence Argus…
-
Ransomware via ransomware.live
🏴☠️ Deadlock has just published a new victim : Aeroklas Duys / Duys Engineering Group
Aeroklas Duys (Pty) Ltd a specialized automotive manufacturing company It was formed as a strategic joint venture between the Duys Engineering Group and Aeroklas (a…
-
Breaches via RansomLook
Franklin Miller Inc. By dark project
As a result of the attack on "Franklin Miller", more than 250 GB of confidential data were stolen. The organization lost control over documents such as drawings and…
-
Breaches via ransomware.live
🏴☠️ Aurora has just published a new victim : Rechtsanwaltskanzlei Dr. Bien
[law] Rechtsanwaltskanzlei Dr. Bien — a specialist insolvency law firm in Hamm, NRW, appointed as insolvency administrator by 12 Amtsgerichte across Westfalen. The…
-
AI Security via Simon Willison
Profiling web-edit with Python 3.15: flame graphs and source heatmaps
Research: Profiling web-edit with Python 3.15: flame graphs and source heatmaps I put the new Python 3.15 profiler through its paces by having GPT-6 Astra Extra High in…
-
Breaches via ransomware.live
🏴☠️ Dark project has just published a new victim : Franklin Miller Inc.
About Franklin Miller Inc. Franklin Miller has been engineering wastewater grinders, crushers, shredders, and screens for municipal and industrial applications since…
-
Breaches via ransomware.live
🏴☠️ Dark project has just published a new victim : PennEastern Architects LCC
About PennEastern Architects LCC The principals of PennEastern Engineers, LLC are Paul Pasonick, Andrew Pasonick, Michael Amato and Daryl Pawlush. All principals have…
-
Breaches via ransomware.live
🏴☠️ Dark project has just published a new victim : Claire's Inc.
About Claire's Inc. Claire's Inc. is a jewelry and accessories retailer aimed at tweens and teens, known for its ear-piercing services and mall-based stores. The company…
-
Breaches via BleepingComputer
Ledger confirms hardware wallet spy implant behind crypto thefts
Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised with a hardware implant that drained users'…
-
Breaches via HIPAA Journal
Secure Healthcare Information Management; Desert Orthopaedic Center Report Data Breaches
Data breaches have been announced by the Pennsylvania-based medical management and billing service provider Secure Healthcare Information Management and Desert…