Latest news

Advertisement
  1. Ransomware via ransomware.live

    🏴☠️ Cry0 has just published a new victim : Anaergia | World-Leading Anaerobic Digestion Solutions

    Target: Anaergia Inc. — 809 Harrington Ct, Burlington, ON L7N 3N...

  2. Ransomware via Infosecurity Magazine

    Q3 2026 Sets New Record for Ransomware Attacks

    Comparitech observed 2627 claimed ransomware attacks in Q3, with critical sectors like finance, technology, education and healthcare experiencing significant increases

  3. Vulnerabilities via Ubuntu Security

    USN-8911-1: Linux kernel (OEM) vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.

  4. Threat Intel via SecurityWeek

    Google Domains Impacted by Recent ccTLD Hijacks

    Hackers hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several Google domains.

  5. AI Security via The Hacker News

    The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition

    As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era…

  6. Threat Intel via DataBreaches.net

    Cyberattack at IDC Frontier disrupts services around nation

    The Asahi Shimbun reports: IDC Frontier Inc., a SoftBank subsidiary that provides cloud services, said Oct. 7 that a ransomware attack caused a system outage affecting…

  7. Threat Intel via BleepingComputer

    Man admits to running network of 15,000 money mules for cybercriminals

    A Ukrainian-Russian dual citizen has pleaded guilty to running a massive money laundering operation that laundered millions for cybercriminals worldwide.

  8. Breaches via Malwarebytes Labs

    ASOS breach update: Hackers stole customer details and shopping searches

    The customer data stolen from global fashion retailer ASOS includes more than just names and contact details, raising questions about its early reassurances. As we…

  9. Advertisement
  10. Threat Intel via Security Affairs

    US Disrupts China-Linked Integrity Tech ‘s Cyber Espionage Tools

    DOJ and FBI seized China-linked hacking tools Microscan and FishHub, linked to Integrity Tech and attacks on critical infrastructure worldwide. The Justice Department…

  11. Breaches via HIPAA Journal

    iRhythm Notifies Individuals Affected by June 2026 Hacking Incident

    iRhythm, a health technology company that specializes in wearable cardiac monitoring devices such as the Zio wearable ECG monitor, has started issuing notification…

  12. AI Security via Cloud Security Alliance

    Introducing The Builder Exchange: Inside Security Stories From the Companies Building Fastest With AI

    Why the industry needs The Builder Exchange Software development traditionally ran through a narrow channel that involved a defined set of engineers, pipelines, and a…

  13. Vulnerabilities via oss-security

    CVE-2026-108039: Apache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limits

    Posted by Colm O hEigeartaigh on Oct 09 Severity: low Affected versions: - Apache CXF 4.2.0 before 4.2.4 - Apache CXF 4.0.0 before 4.1.9 - Apache CXF before 3.6.13…

  14. Vulnerabilities via oss-security

    CVE-2026-107938: Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.

    Posted by Colm O hEigeartaigh on Oct 09 Severity: important Affected versions: - Apache CXF 4.2.0 before 4.2.4 - Apache CXF 4.0.0 before 4.1.9 - Apache CXF before 3.6.13…

  15. Vulnerabilities via oss-security

    CVE-2026-107937: Apache CXF: The attachment header size and count limits can be bypassed, which allows denial of service through memory exhaustion.

    Posted by Colm O hEigeartaigh on Oct 09 Severity: low Affected versions: - Apache CXF 4.2.0 before 4.2.4 - Apache CXF 4.0.0 before 4.1.9 - Apache CXF before 3.6.13…

  16. Vulnerabilities via oss-security

    CVE-2026-100227: Apache CXF: XML Signature wrapping in JAX-RS XML Security

    Posted by Colm O hEigeartaigh on Oct 09 Severity: moderate Affected versions: - Apache CXF 4.2.0 before 4.2.4 - Apache CXF 4.0.0 before 4.1.9 - Apache CXF before 3.6.13…

  17. Vulnerabilities via SecurityWeek

    Unpatched AhsayCBS Vulnerabilities Exploited in the Wild

    The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.

  18. Vulnerabilities via oss-security

    CVE-2026-97791: Apache CXF: STSTokenValidator can accept untrusted SAML assertions because it shares validation state between requests

    Posted by Colm O hEigeartaigh on Oct 09 Severity: important Affected versions: - Apache CXF 4.2.0 before 4.2.4 - Apache CXF 4.0.0 before 4.1.9 - Apache CXF before 3.6.13…

  19. Vulnerabilities via oss-security

    CVE-2026-97468: Apache CXF: Authentication bypass via weak cache keys for validated STS tokens

    Posted by Colm O hEigeartaigh on Oct 09 Severity: important Affected versions: - Apache CXF 4.2.0 before 4.2.4 - Apache CXF 4.0.0 before 4.1.9 - Apache CXF before 3.6.13…

  20. Vulnerabilities via oss-security

    CVE-2026-86463: Apache CXF: FIQL Query Parser Denial of Service

    Posted by Colm O hEigeartaigh on Oct 09 Severity: low Affected versions: - Apache CXF (org.apache.cxf:cxf-rt-rs-extension-search) 4.2.0 before 4.2.4 - Apache CXF…

  21. Vulnerabilities via oss-security

    CVE-2026-79650: Apache CXF: OIDC RP Open Redirect

    Posted by Colm O hEigeartaigh on Oct 09 Severity: important Affected versions: - Apache CXF (org.apache.cxf:cxf-rt-rs-security-sso-oidc) 4.2.0 before 4.2.4 - Apache CXF…