Latest news

Advertisement
  1. AI Security via ransomware.live

    🏴☠️ Nightspire has just published a new victim : KSL Dirtworks

    [AI generated] N/A I do not have reliable, verified information about a specific company called "KSL Dirtworks." Rather than provide potentially inaccurate details about…

  2. Vulnerabilities via oss-security

    CVE-2026-71183: Apache DolphinScheduler: Missing Authorization Checks Allow Disclosure of Data Source Information and Passwords

    Posted by Wenjun Ruan on Oct 07 Severity: important Affected versions: - Apache DolphinScheduler before 3.4.3 Description: An authorization vulnerability in Apache…

  3. Threat Intel via SANS Internet Storm Center

    ISC Stormcast For Thursday, October 8th, 2026 https://isc.sans.edu/podcastdetail/10128, (Thu, Oct 8th)

    (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

  4. Vulnerabilities via oss-security

    CVE-2026-66087: Apache DolphinScheduler: Project Authorization Bypass in the Task instance stop/savepoint Endpoint

    Posted by Wenjun Ruan on Oct 07 Severity: moderate Affected versions: - Apache DolphinScheduler before 3.4.3 Description: An authorization bypass vulnerability in Apache…

  5. Vulnerabilities via oss-security

    CVE-2026-66084: Apache DolphinScheduler: Project Authorization Bypass in the Task Definition with-upstream Endpoint

    Posted by Wenjun Ruan on Oct 07 Severity: moderate Affected versions: - Apache DolphinScheduler before 3.4.3 Description: An authorization bypass vulnerability in Apache…

  6. Vulnerabilities via oss-security

    CVE-2026-66082: Apache DolphinScheduler: Cross-project authorization bypasses in DolphinScheduler API (schedule / workflow）

    Posted by Wenjun Ruan on Oct 07 Severity: moderate Affected versions: - Apache DolphinScheduler before 3.4.3 Description: An authorization bypass vulnerability in Apache…

  7. Ransomware via DataBreaches.net

    Known Cybersecurity Expert and Owner of Florida Ransomware Remediation Company Charged with Defrauding Clients

    Here’s another case where the folks who were supposed to be the good guys helping you may be harming you. Zohar Pinhasi, 50, also known as “Zack Silver” and “Zack…

  8. AI Security via AI Incident Database

    PixelLeak: How AI Agents Exposed Developer Screenshots from Leading Tech Companies

    Every day, developers hand the last mile of their work to an AI coding agent: summarize your changes, attach screenshots showing the changes, then submit them for…

  9. Advertisement
  10. AI Security via AI Incident Database

    AI 성착취물 만든 텔레그램방 '그놈'…잡고보니 동대문서 경찰관

    (서울=연합뉴스) 박재현 전재훈 기자 = 인공지능(AI)으로 지인을 나체로 표현한 성착취물을 만들고 텔레그램 대화방에서 성적 허위 영상물을 공유하던 현직 경찰관이 구속됐다. 동종 사건으로 기소유예 처분을 받고도 경찰에 입직한 그는 경찰제복을 입은 뒤에도 범행을 이어가다 다른 경찰의 잠입수사에 덜미를…

  11. AI Security via AI Incident Database

    '성착취물 만든 경찰관' 성범죄 전력에도 임용된 이유는…"법령 문제"

    (서울=연합뉴스) 전재훈 기자 = 인공지능(AI)으로 성착취물을 만들고 온라인에서 공유한 현직 경찰관이 구속된 사건과 관련해, 이 경찰관이 과거 성범죄 혐의로 기소유예 처분받은 전력이 있는데도 현행법상 이를 걸러낼 장치가 없어 경찰 임용이 이뤄진 것으로 확인됐다. 고범석 서울경찰청장은 6일 정례…

  12. AI Security via AI Incident Database

    '성범죄 기소유예' 경찰, AI성착취물 제작·유포…구속기소

    \[부산=뉴시스]김민지 기자 = 지인을 대상으로 인공지능(AI)을 활용해 성 착취물을 만들고 이를 공유한 혐의를 받는 현직 경찰관이 구속 상태로 재판에 넘겨졌다. 부산공소청은 6일 현직 경찰관 A씨를 성폭력처벌법(허위영상물편집등) 위반 등 6개 혐의로 구속 기소했다고 밝혔다. A씨는 2022년…

  13. AI Security via AI Incident Database

    Police officer indicted for fabricating, distributing deepfake videos of acquaintances

    BUSAN, Oct. 7 (Yonhap) -- A police officer in Seoul has been indicted for using artificial intelligence (AI) to create and spread deepfake videos of people he knew…

  14. AI Security via AI Incident Database

    How Long Until AI Hacks Everything?

    The Australian government has been scrambling since the revelation that, earlier this year, it was hacked. At the United Nations General Assembly last month, Australian…

  15. AI Security via AI Incident Database

    KI-Verleger packt aus: So entstehen meine Bücher

    Stephan Wünsche, Referent im Bereich „Open Science" und Fachreferent für Musik an der Universitätsbibliothek Leipzig, hat erneut von Künstlicher Intelligenz (KI)…

  16. Threat Intel via Recorded Future

    Japan Adopts Proactive Cyber Defense Strategy

    Executive Summary Japan’s Active Cyber Defense (ACD) framework shifts the country from voluntary information sharing and post-incident investigation to mandatory…

  17. Vulnerabilities via GreyNoise Labs

    Spike in Attacks Targeting Digital Video Recorders in Ukraine

    For months, GreyNoise recorded almost no Hikvision camera exploit attempts against Ukraine. On Sept 21 activity surged for nine days during Russian strikes, almost all…

  18. AI Security via Elastic Security Labs

    Introducing AlertZero: Inbox zero for your alert queue

    For the last several months, we’ve been busy talking to security teams and building answers to the AI-accelerated challenges that you’ve told us you’re facing. Among…

  19. Ransomware via ransomware.live

    🏴☠️ Silentransomgroup has just published a new victim : K...

    Redacted entry - full company name pending disclosure (FULL DATA TIMER active).

  20. Vulnerabilities via oss-security

    tor-0.4.9.14 released

    Posted by Sam James on Oct 07 """ @@ -1,3 +1,136 @@ +Changes in version 0.4.9.14 - 2026-10-07 + Another week, another security release. This again contains major…

  21. Ransomware via ransomware.live

    🏴☠️ Dragonforce has just published a new victim : Petrosul Distribuidora, Transportadora e Comércio de Combustíveis Ltda.

    Petrosul is a Brazilian company established in 1994, specializing in fuel storage terminal operations since 2015. The company offers state-of-the-art infrastructure…