Latest news

Advertisement
  1. Vulnerabilities via Infosecurity Magazine

    Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One

    Ethical hackers have already found 32 zero days in various products at Pwn2Own Ireland

  2. AI Security via Help Net Security

    Anthropic loosens Claude’s cyber restrictions for verified defenders

    Anthropic expanded its Cyber Verification Program (CVP), giving approved security professionals access to advanced Claude capabilities with fewer automated blocks on…

  3. Threat Intel via ESET WeLiveSecurity

    Inside a brand deal scam targeting YouTube creators

    A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account

  4. AI Security via GuidePoint Security

    aws-auth ConfigMap Deprecated – EKS Access Entries Are the Way Forward

    aws-auth ConfigMap Deprecated – EKS Access Entries Are the Way Forward October 7, 2026 Keegan Justis BLOG 5 min. If you’ve been running Amazon Web Services (AWS) Elastic…

  5. Ransomware via Hornetsecurity

    Security Awareness Best Practices for 2026: How to Build, Measure, and Improve Your Program

    The best practices for security awareness programs in 2026 are fundamentally different from the annual training presentations that many organisations are still using…

  6. Ransomware via Europol

    Europol urges early action to protect cryptocurrencies and sensitive data from quantum threats

    The timing of these capabilities remains uncertain. However, this should not be the main concern. Adapting systems and coordinating security upgrades will take time.

  7. Ransomware via ransomware.live

    🏴☠️ Umbra has just published a new victim : Tharisa

    Tharisa is a Cyprus-based mining group focused on the production and processing of platinum group metals (PGMs) and chrome, with major operations in South Africa and…

  8. Breaches via Infosecurity Magazine

    Danish CPR Breach Highlights Challenge of Supply Chain Risk

    A breach of 8.8 million citizens on the Danish Central Register of Persons (CPR) occurred via third-party access

  9. Advertisement
  10. AI Security via The Hacker News

    Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

    Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced…

  11. AI Security via SecurityWeek

    Wikimedia Says Rogue OpenAI Agents Tried to Turn Its Tools Into Proxies

    Wikimedia looked into whether its own websites had seen activity like that disclosed by other organizations

  12. Vulnerabilities via CERT-EU

    2026-015: Critical Vulnerability in Multiple Atlassian Products

    On 5 October 2026, Atlassian published a security advisory addressing a critical arbitrary file access vulnerability. It affects Bitbucket Data Center, Confluence Data…

  13. AI Security via Security Affairs

    Wikimedia Finds Unauthorized OpenAI Agent Activity on Wikipedia

    Wikimedia found unauthorized OpenAI agent activity on its platforms, including unapproved edits, proxy attempts and millions of automated API requests. Wikimedia ran its…

  14. Vulnerabilities via NCSC-NL

    NCSC-2026-0404 [1.00] [M/H] Kwetsbaarheden verholpen in WatchGuard Fireware OS

    WatchGuard heeft meerdere kwetsbaarheden verholpen in Fireware OS. De impact van deze kwetsbaarheden varieert, net als de toegangsrechten die nodig zijn voor misbruik. -…

  15. Vulnerabilities via oss-security

    CVE-2026-97146: Apache YuniKorn: Admission control bypass via system label forgery

    Posted by Wilfred Spiegelenburg on Oct 07 Severity: CVSS 4.0: 4.8 (medium) CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Affected versions: - Apache…

  16. Vulnerabilities via oss-security

    CVE-2026-92393: Apache YuniKorn: Admission control bypass via workload UPDATE operation

    Posted by Wilfred Spiegelenburg on Oct 07 Severity: CVSS 4.0: 2.0 (low) CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Affected versions: - Apache…

  17. Vulnerabilities via oss-security

    CVE-2026-78243: Apache YuniKorn: LDAP Group provider panics on lowercase attribute name

    Posted by Wilfred Spiegelenburg on Oct 07 Severity: CVSS 4.0: 2.1 (low) CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/S:N/AU:N/R:A/V:D/RE:H/U:Green…

  18. Breaches via The Hacker News

    100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

    The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injected with malicious JavaScript to serve an…

  19. Vulnerabilities via SecurityWeek

    Android’s October 2026 Updates Patch 25 Vulnerabilities

    The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation.

  20. Vulnerabilities via SecurityWeek

    Atlassian Patches Critical Vulnerability Affecting 8 Products

    Unauthenticated attackers could exploit the flaw to access specific files in the web application root directory.

  21. Vulnerabilities via NCSC-NL

    NCSC-2026-0403 [1.00] [M/H] Kwetsbaarheden verholpen in SonicWall SMA1000 Appliance

    SonicWall heeft meerdere kwetsbaarheden verholpen in de SonicWall SMA1000 Appliance. De kwetsbaarheden omvatten een pre-authenticatie Server-Side Request Forgery (SSRF)…