Latest news

Advertisement
  1. Vulnerabilities via oss-security

    CVE-2026-78384: Apache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb)

    Posted by Colm O hEigeartaigh on Oct 09 Severity: moderate Affected versions: - Apache CXF (org.apache.cxf:cxf-core) 4.2.0 before 4.2.4 - Apache CXF…

  2. Vulnerabilities via oss-security

    CVE-2026-73179: Apache CXF: JPA authorization-code consume is non-atomic

    Posted by Colm O hEigeartaigh on Oct 09 Severity: low Affected versions: - Apache CXF (org.apache.cxf:cxf-rt-rs-security-oauth2) 4.2.0 before 4.2.4 - Apache CXF…

  3. Vulnerabilities via BleepingComputer

    Microsoft: Outdated Windows devices will stop receiving security updates

    Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year's Windows Update certificate rotation.

  4. Vulnerabilities via oss-security

    CVE-2026-71575: Apache CXF: Inoperative max_age authentication-freshness check in OidcClientCodeRequestFilter

    Posted by Colm O hEigeartaigh on Oct 09 Severity: low Affected versions: - Apache CXF (org.apache.cxf:cxf-rt-rs-security-sso-oidc) 4.2.0 before 4.2.4 - Apache CXF…

  5. Vulnerabilities via Security Affairs

    CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability

    Citrix patched CVE-2026-107406, a critical NetScaler ADC and Gateway flaw that could allow remote code execution or denial-of-service attacks. Citrix has released…

  6. Threat Intel via Infosecurity Magazine

    UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group

    The UK, US and allies have issued an alert detailing malicious activity linked to China’s Integrity Technology Group

  7. Threat Intel via SecurityWeek

    Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries

    Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost Android devices.

  8. AI Security via Help Net Security

    Anthropic offers free AI security scans to open-source maintainers

    Anthropic’s OSS Scanner is a new, free service that uses the company’s strongest AI models to find security vulnerabilities in open-source software. Maintainers who opt…

  9. Advertisement
  10. Threat Intel via Help Net Security

    FBI disrupts Flax Typhoon hacking tools used in global cyberattacks

    The FBI seized seven domains used to operate Microscan and FishHub, two hacking tools linked to Chinese state-sponsored hackers known as Flax Typhoon that were used to…

  11. Vulnerabilities via oss-security

    Xen Security Advisory 522 v1 (CVE-2026-98375) - Linux xen-netfront: backend can crash guest via malformed RX packets

    Posted by Xen . org security team on Oct 09 Xen Security Advisory CVE-2026-98375 / XSA-522 Linux xen-netfront: backend can crash guest via malformed RX packets ISSUE…

  12. Vulnerabilities via The Hacker News

    GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

    A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only…

  13. AI Security via Infosecurity Magazine

    AI Training Critical as Governance Challenges Grow

    As AI adoption accelerates, ISACA is expanding its certification portfolio with a governance-focused credential designed to help professionals manage AI securely

  14. Threat Intel via Help Net Security

    Product showcase: SimpleLogin keeps your email address private with aliases

    SimpleLogin is an email alias service from Proton that forwards messages to an existing mailbox. Users create addresses for registrations, purchases, and correspondence…

  15. Vulnerabilities via Ubuntu Security

    USN-8887-3: Linux kernel vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with…

  16. Vulnerabilities via Ubuntu Security

    USN-8875-2: Linux kernel (NVIDIA) vulnerabilities

    It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer…

  17. Vulnerabilities via Ubuntu Security

    USN-8903-2: Linux kernel vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.

  18. Vulnerabilities via Ubuntu Security

    USN-8905-2: Linux kernel (GCP) vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.

  19. Threat Intel via SecurityWeek

    US Disrupts Chinese State-Sponsored Hacking Tools

    Flax Typhoon and other APTs used MicroScan and FishHub to scan and hack US and foreign critical infrastructure.

  20. Vulnerabilities via BleepingComputer

    Citrix warns admins to patch new NetScaler RCE flaw immediately

    Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway…

  21. Vulnerabilities via The Hacker News

    Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

    Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The…