Latest news

Advertisement
  1. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-69301 Windows Win32k Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

  2. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-69322 Microsoft Windows Search Component Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

  3. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-69324 Windows Performance Monitor Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

  4. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-69340 Windows NTFS Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

  5. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-69385 Windows TCP/IP Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

  6. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-69433 Windows Error Reporting Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

  7. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-69571 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

  8. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-69566 Windows NTFS Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  9. Advertisement
  10. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-69688 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

  11. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-72987 Windows DNS Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  12. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-73006 DirectWrite Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  13. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-69598 Windows iSCSI Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  14. AI Security via Security Affairs

    Claude Helps Secure Open Source as Anthropic Offers Free Vulnerability Scanning

    Anthropic launches free OSS Scanner, using AI to find open-source vulnerabilities and help maintainers fix bugs before attackers exploit them. Anthropic is launching OSS…

  15. Vulnerabilities via oss-security

    CVE-2026-103413: Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml

    Posted by Andrea Cosentino on Oct 09 Severity: CVSS 3.1: 8.8 (high) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected versions: - Apache Camel Karavan 4.0.0 before…

  16. Vulnerabilities via oss-security

    CVE-2026-103412: Apache Camel Karavan: project file name path traversal when committing a project to Git

    Posted by Andrea Cosentino on Oct 09 Severity: CVSS 3.1: 8.8 (high) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected versions: - Apache Camel Karavan 3.18.0 before…

  17. Vulnerabilities via oss-security

    Re: OpenJPEG: heap-buffer-overflow write fixed on master since Feb 2026, still present in every release (2.5.3, 2.5.4)

    Posted by Stuart Henderson on Oct 09 It is unmaintained: https://github.com/uclouvain/openjpeg/commit/06bbae8b5d5e57f8c28fe862b80a9464b320e314 "This repository should be…

  18. Ransomware via DataBreaches.net

    Silent Ransom Group claims “Luna Moth Files” are fake. The data suggest otherwise.

    On Tuesday, cybersecurity professionals began investigating an onion site that appeared to contain internal chat files from Silent Ransom Group. On Thursday, Silent…

  19. AI Security via The Record

    OpenAI says it disrupted Russian and Iranian influence ops that used ChatGPT

    A Latin American propaganda operation run by Russians and a cluster of Iranian fake journalist identities each had help from now-closed ChatGPT accounts, OpenAI's safety…

  20. Vulnerabilities via SOCRadar

    Critical Cisco NX-OS Flaws Threaten Nexus Switches

    Critical Cisco NX-OS Flaws Threaten Nexus Switches Cisco has patched five critical vulnerabilities affecting Nexus 3000 and Nexus 9000 switches running standalone NX-OS…

  21. Threat Intel via TechCrunch

    Surveillance company Flock cuts staff as privacy backlash grows

    Flock would not say if CEO Garrett Langley would take a pay cut following the reduction in workforce.