Latest news

Advertisement
  1. Threat Intel via ransomware.live

    🏴☠️ Scarlettgroup has just published a new victim : sigsauer.com

    SIG SAUER is a leading firearms manufacturer specializing in pistols, rifles, ammunition, optics, and accessories for civilian, law enforcement, and military use.

  2. Vulnerabilities via SecurityWeek

    Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million

    A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff.

  3. Breaches via ransomware.live

    🏴☠️ Doommageddon has just published a new victim : ASLAN TEKSTİL ve KONFEKSİYON San.ve Tic. A.Ş.

    Status: leaked | Data size: 3.27 GB | Files: 6457 files | Deadline: 2026-11-04T00:00:00Z

  4. Threat Intel via The Hacker News

    Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure

    Russian authorities have arrested three suspected members of a threat group known as VasyGrek and dismantled its criminal infrastructure. Also known as Fluffy Wolf, the…

  5. Vulnerabilities via The Hacker News

    Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction

    A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin. The flaw…

  6. Vulnerabilities via Help Net Security

    Open-source file sync tool rsync 3.5.2 fixes a CPU exhaustion flaw

    The rsync project released version 3.5.2, and it closes a flaw that let a connecting client tie up a server’s CPU with checksum math that leads nowhere. The new version…

  7. AI Security via Help Net Security

    What AI-generated malware looks like under the microscope

    In this Help Net Security interview, Lindsay Kaye, VP of Threat Intelligence at HUMAN Security, talks about what AI-generated malware looks like on the bench. She points…

  8. AI Security via Adversa AI

    Top agent skill security resources — November 2026

    17 agent skill security resources for November 2026: an official OpenAI skill leaking tokens, scanners fooled by bytecode, and clean skills that chain.

  9. Advertisement
  10. Vulnerabilities via Help Net Security

    Ghostunnel: Open-source TLS proxy with mutual authentication

    Ghostunnel is an open-source proxy that handles TLS for programs that cannot handle it themselves. It works in two directions. In server mode it sits in front of a…

  11. Vulnerabilities via Chrome Releases

    Beta Channel Update for ChromeOS / ChromeOS Flex

    The Beta channel is being updated to OS version 16868.9.0 (Browser version 158.0.8127.9) for most ChromeOS devices. If you find new issues, please let us know one of the…

  12. Vulnerabilities via oss-security

    Rails security releases: 8.0.5.2 and 8.1.4.1

    Posted by Mike Dalessio on Nov 03 Rails Versions 8.0.5.2 and 8.1.4.1 have been released. These are **security updates** addressing 21 security issues. We strongly…

  13. Vulnerabilities via Help Net Security

    Secure your containers without breaking what works

    Container security has a familiar problem. Teams identify vulnerabilities, but turning those findings into lower risk is much harder. A standard container image may…

  14. Vulnerabilities via Zero Day Initiative

    ZDI-26-874: (0Day) Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this…

  15. Vulnerabilities via Zero Day Initiative

    ZDI-26-873: (0Day) Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this…

  16. Vulnerabilities via Zero Day Initiative

    ZDI-26-872: (0Day) Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this…

  17. Vulnerabilities via Zero Day Initiative

    ZDI-26-871: (0Day) Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this…

  18. Vulnerabilities via Zero Day Initiative

    ZDI-26-870: (0Day) Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this…

  19. Vulnerabilities via Zero Day Initiative

    ZDI-26-869: MailEnable Save Directory Traversal Arbitrary File Creation Vulnerability

    This vulnerability allows remote attackers to create arbitrary files on affected installations of MailEnable. Authentication is not required to exploit this…

  20. Vulnerabilities via The Hacker News

    CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing…

  21. AI Security via Help Net Security

    Companies going all in on AI could see their strategy backfire

    Four of the five highest-ranked enterprise risks in Gartner’s Quarterly Emerging Risk Report were AI-related. AI strategy miscalculation and AI-driven competitive…