Latest news

Advertisement
  1. Vulnerabilities via NCSC-NL

    NCSC-2026-0403 [1.00] [M/H] Kwetsbaarheden verholpen in SonicWall SMA1000 Appliance

    SonicWall heeft meerdere kwetsbaarheden verholpen in de SonicWall SMA1000 Appliance. De kwetsbaarheden omvatten een pre-authenticatie Server-Side Request Forgery (SSRF)…

  2. Breaches via ransomware.live

    🏴☠️ N0n has just published a new victim : Chibitek

    managed IT services (MSP) · USA | Complete client financial records held by this managed IT provider (accounting, inventory, payroll data); Client network credentials…

  3. Breaches via Have I Been Pwned

    Double Counter - 274,922 breached accounts

    In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool. In its…

  4. AI Security via Help Net Security

    AI Agent Gateway: Open-source tool keeps credentials out of agent configs

    Tuskira’s AI Agent Gateway is an open-source solution that sits between AI agents and everything they call: the MCP tool servers that connect them to services like…

  5. Vulnerabilities via oss-security

    FW: X.Org Security Advisory: multiple security issues in X.Org X server

    Posted by Peter Hutterer on Oct 06 X.Org Security Advisory: October 07, 2026 Issues in X.Org X server prior to xorg-server-21.1.25 and Xwayland prior to xwayland-24.1.14…

  6. AI Security via Help Net Security

    OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing

    The OpenSSH team released version 10.6 on Oct. 6 and said it will ship releases more often for now to get bugfixes into users’ hands more quickly. The maintainers have…

  7. Vulnerabilities via oss-security

    CVE-2026-97720: Apache Impala: Impala Executor Webserver Auth Bypass

    Posted by Michael Smith on Oct 06 Severity: low Affected versions: - Apache Impala 4.1.0 through 4.5.2 Description: Incorrect implementation of JWT/OAuth authentication…

  8. Vulnerabilities via oss-security

    CVE-2026-93684: Apache Impala: Stored XSS in Impala query plans

    Posted by Michael Smith on Oct 06 Severity: moderate Affected versions: - Apache Impala 2.7.0 through 4.5.2 Description: An SQL user using Impala up to and including…

  9. Advertisement
  10. Ransomware via ransomware.live

    🏴☠️ Incransom has just published a new victim : acmestamping.com

    Acme Stamping & Wire Forming Co. specializes in metal stamping, CNC machining, precision wire forming, and tool & die services. They offer a range of capabilities…

  11. Ransomware via ransomware.live

    🏴☠️ Incransom has just published a new victim : harborpacific.com

    Harbor Pacific Contractors, Inc. specializes in Industrial, Mechanical, and Heavy Civil Construction Services in the Pacific Northwest. Their offerings include…

  12. Vulnerabilities via oss-security

    CVE-2026-90466: Apache Impala: Path traversal executes JARs outside trusted paths

    Posted by Michael Smith on Oct 06 Severity: important Affected versions: - Apache Impala 4.5.2 before 4.5.3 Description: Path traversal of 'trusted_jar_paths' in Impala…

  13. Ransomware via ransomware.live

    🏴☠️ Incransom has just published a new victim : architekt-vondanwitz.de

    Architektur in der Symbiose aus der erfahrenen und sicheren Anwendung der innovativen Bauteilevorfertigung, mit ökonomischer Umsetzung, ist seitüber 40 Jahren unsere…

  14. Vulnerabilities via oss-security

    CVE-2026-105244: Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content

    Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.12…

  15. Vulnerabilities via oss-security

    CVE-2026-105240: Apache log4net: NUL character truncates OutputDebugStringAppender records

    Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.9 before…

  16. Vulnerabilities via oss-security

    CVE-2026-105243: Apache log4net: Oversize EventLogAppender record silently discarded

    Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.9 before…

  17. AI Security via Help Net Security

    AI endpoint management: Visibility, compliance, and remediation

    Endpoint estates are growing faster than the teams that look after them. Hybrid work, cloud adoption, contractor laptops, a steady stream of new CVEs, and rising…

  18. Vulnerabilities via oss-security

    CVE-2026-105242: Apache log4net: Request validation failure drops the event in the aspnet-request converter

    Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.11…

  19. Vulnerabilities via oss-security

    CVE-2026-105241: Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch

    Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.9 before…

  20. Vulnerabilities via oss-security

    CVE-2026-105239: Apache log4net: NUL character truncates EventLogAppender records

    Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.9 before…

  21. Vulnerabilities via oss-security

    CVE-2026-105111: Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSS

    Posted by Gary D. Gregory on Oct 06 Severity: low CVSS 3.1: 4.7 (medium) CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS 4.0: 2.3 (low)…