Latest news
-
Vulnerabilities via oss-security
CVE-2026-107373: ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument
Posted by Robert Rothenberg on Oct 10 CVE-2026-107373 CPAN Security Group CVE ID: CVE-2026-107373 Distribution: ExtUtils-Typemaps-Default Versions: before 1.06 MetaCPAN…
-
Ransomware via CyberScoop
Canadian cybersecurity executive arrested in federal extortion case
Federal authorities arrested a Canadian cybersecurity executive Thursday in Pennsylvania on charges of conspiracy of extortion, according to federal court records posted…
-
Breaches via ransomware.live
🏴☠️ Rhysida has just published a new victim : Gress Clark Young & Schoepper
Gress Clark Young & Schoepper 167,804 files / ~166.4 GBBanking details - of the firm and its clients.SSNs + signatures of clients/witnesses; W-9, I-9 forms with DL/SSN…
-
AI Security via BleepingComputer
Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
Traditional attack surface management helps organizations discover exposed assets, but visibility alone is not enough to address threats. Criminal IP introduces AITEM…
-
AI Security via Wired
AI Is Getting Really Good at Messing With Cybercriminals
Anti-cybercrime initiatives are increasingly using AI to scam the scammers by tricking them into talking to lifelike bots that they think are real victims.
-
Threat Intel via DataBreaches.net
FBI announces yet another arrest allegedly connected to the FBI Jobs hack
The FBI is doing another victory dance after arresting someone they allege assisted ShinyHunters with the FBI Jobs attack. Brian Krebs reports: Agents with the Federal…
-
Ransomware via SecurityWeek
Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
The former core infrastructure engineer deleted admin accounts, reset hundreds of passwords, and demanded 20 bitcoin to spare the company’s servers.
-
AI Security via The Hacker News
The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't
In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party products now embed AI. About 282 of them sit behind single sign-on. The…
- Advertisement
-
AI Security via DataBreaches.net
Anthropic AI agent gives fake murder tip to US cops in global breach
Georgia Wells and Joseph Pisani report: Rogue AI models have hacked companies and tried to break into government websites. Now one has submitted a fake tip for an…
-
Vulnerabilities via oss-security
CVE-2026-103636: Apache DataSketches: datasketches-cpp: Out-of-bounds read in VarOpt union deserialization allows denial of service via a truncated sketch
Posted by Lee Rhodes on Oct 10 Severity: low Affected versions: - Apache DataSketches 2.0.0-incubating through 5.2.0 Description: Out-of-bounds read in the VarOpt union…
-
Vulnerabilities via oss-security
CVE-2026-103635: Apache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sketch deserialization allows denial of service via a crafted sketch
Posted by Lee Rhodes on Oct 10 Severity: low Affected versions: - Apache DataSketches 3.1.0 through 5.2.0 Description: Out-of-bounds read in the compact Theta sketch…
-
Vulnerabilities via oss-security
CVE-2026-103634: Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in Count-Min sketch deserialization allows memory corruption via a crafted sketch
Posted by Lee Rhodes on Oct 10 Severity: moderate Affected versions: - Apache DataSketches 4.1.0 through 5.2.0 Description: Out-of-bounds read and write in the Count-Min…
-
Vulnerabilities via oss-security
CVE-2026-103513: Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in the CPC sketch deserialization allows memory corruption via a crafted sketch
Posted by Lee Rhodes on Oct 10 Severity: moderate Affected versions: - Apache DataSketches 2.0.0-incubating through 5.2.0 Description: Out-of-bounds read and write in…
-
Vulnerabilities via oss-security
CVE-2026-103501: Apache DataSketches: datasketches-cpp: HLL CouponList Deserialization Buffer Overflow allows memory corruption via a crafted sketch
Posted by Lee Rhodes on Oct 10 Severity: moderate Affected versions: - Apache DataSketches 1.0.0-incubating through 5.2.0 Description: Heap buffer overflow in the HLL…
-
AI Security via The Hacker News
Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws
Anthropic on Friday said it's cutting off live internet access for all its internal evaluations following the discovery of new incidents in which its artificial…
-
Threat Intel via SANS Internet Storm Center
Why TLP should not replace your internal information classification, (Sat, Oct 10th)
The Traffic Light Protocol (TLP)[1], which is now in its second incarnation, is a wonderful standard that enables one to easily communicate whether information may be…
-
Threat Intel via Security Affairs
US Sentences Empire Market Co-Creator Over $430 Million Criminal Marketplace
Empire Market co-creator Raheim Hamilton was sentenced to 40 years in prison for running a dark web marketplace linked to $430 million in illegal trades. The case…
-
AI Security via Simon Willison
Quoting The New York Times
Anthropic detailed the activity of its A.I. agents in a blog post on Friday, without naming the targeted websites. But two sources with knowledge of the incidents said…
-
Ransomware via Krebs on Security
FBI Arrests Founder of Ransomware Negotiation Firm
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the…
-
Vulnerabilities via oss-security
3 Vulnerabilities in GNU Aspell before 0.60.8.3
Posted by Alan Coopersmith on Oct 09 https://cert.pl/en/posts/2026/10/CVE-2026-75818/ says: