Latest news
-
AI Security via CyberScoop
FBI, French authorities seize deepfake CSAM-for-sale websites
The FBI and French authorities have arrested an individual and seized a pair of websites that were used to disseminate child sexual exploitation material, including AI…
-
Threat Intel via TechCrunch
CIA officer admits to creating fake top secret government program to steal over $190 million, including gold bars
CIA officer David Rush, who worked on highly sensitive intelligence programs, reached a plea deal with U.S. prosecutors after he was caught siphoning money and gold with…
-
AI Security via Cloudflare
Building an evidence-grounded agentic security operations harness on Cloudflare
Security alerts rarely arrive one at a time. A single alert can cause a spike across the environment, requiring a human analyst to decide which alerts are related and…
-
Vulnerabilities via The Hacker News
SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances
SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company's network and applications. The most…
-
Vulnerabilities via Ubuntu Security
USN-8897-1: lxml vulnerabilities
Guillem Lefait discovered that lxml incorrectly handled certain URL attributes. A remote attacker could possibly use this issue to bypass URL sanitization, leading to a…
-
Ransomware via ransomware.live
🏴☠️ Incransom has just published a new victim : Wavecrest HFA
12,143 Files, 267 Folders 23,991,067,648 bytes
-
Ransomware via ransomware.live
🏴☠️ Incransom has just published a new victim : Tec Imports
Tec Imports group offers a complete range of logistics solutions, from coordinating shipments from the manufacturer's plant to the end customer, whether by sea, air, or…
-
Ransomware via ransomware.live
🏴☠️ Incransom has just published a new victim : UAE Pro League
The UAE Pro League is the top division of professional soccer in the United Arab Emirates. GENERAL INQUIRIES +971-2-4044999 [email protected] MEDIA INQUIRIES…
- Advertisement
-
Ransomware via ransomware.live
🏴☠️ Incransom has just published a new victim : City of Cloverdale
Cloverdale is a small city in Sonoma County, Northern California, set among the vineyards and rolling hills of the Alexander Valley. Known for its small-town charm…
-
Vulnerabilities via Microsoft Security
3 lessons from frontier AI vulnerability research
Shift 1. From frontier capability to scale Shift 2. From token consumption to reasoning economics Shift 3.
-
Vulnerabilities via Canadian Centre for Cyber Security
HPE security advisory (AV26-1011)
Serial number: AV26-1011 Date: October 7, 2026 As of October 6, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following products: HPE…
-
Threat Intel via BleepingComputer
Microsoft Outlook to block MSIX attachments starting November
Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the new Outlook Windows client starting next…
-
Breaches via HIPAA Journal
Jefferson-Blount-St. Clair Mental Health Authority Pays $700K to Settle Data Breach Lawsuit
Jefferson-Blount-St. Clair Mental Health Authority has agreed to settle a consolidated class action lawsuit stemming from a 2025 security incident that affected more…
-
Vulnerabilities via Canadian Centre for Cyber Security
[Control Systems] Johnson Controls security advisory (AV26-1010)
Serial number: AV26-1010 Date: October 7, 2026 As of October 6, 2026, Johnson Controls is affected by a vulnerability in the following product: Illustra Standard - L4L…
-
Vulnerabilities via The Hacker News
Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an attacker run code on the cache server…
-
AI Security via Wired
The Pentagon Hopes to Speed Up ‘Kill Chain’ AI Buys With 5-Minute Videos
The US government’s Tradewinds initiative has made it easier to throw millions of dollars at “nontraditional” defense contractors, including OpenAI, Anthropic, and…
-
Threat Intel via The Hacker News
PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet
Cybersecurity researchers are calling attention to a new malware family that has been observed targeting exposed artificial intelligence (AI) and large language model…
-
Vulnerabilities via oss-security
CVE-2026-92415: Apache Jackrabbit: DavEx client runs Class.forName + (String)-constructor on server-controlled error bodies
Posted by Julian Reschke on Oct 07 Severity: CVSS 4.0: 6.9 (medium) CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/S:N Affected versions: - Apache…
-
Vulnerabilities via NCSC-NL
NCSC-2026-0405 [1.00] [M/H] Kwetsbaarheden verholpen in Google Android
Google heeft kwetsbaarheden verholpen in Android. Samsung heeft de voor Samsung Mobile relevante kwetsbaarheden verholpen in hun producten. De kwetsbaarheden betreffen…
-
Vulnerabilities via Canadian Centre for Cyber Security
Veeam security advisory (AV26-1009)
Serial number: AV26-1009 Date: October 7, 2026 As of October 7, 2026, Veeam is affected by vulnerabilities in the following product: Veeam Backup and Replication Prior…