Latest news
-
AI Security via oss-security
Announce: OpenSSH 10.6 released
Posted by Damien Miller on Oct 06 OpenSSH 10.6 has just been released. It will be available from the mirrors listed at https://www.openssh.com/ shortly. OpenSSH is a…
-
Threat Intel via Malwarebytes Labs
Facebook Marketplace scam uses your name and number
Facebook users are reporting receiving a message with a fake Facebook Marketplace listing that has their name as the seller. It works like this. You receive a message…
-
Vulnerabilities via Ubuntu Security
USN-8881-1: FreeType vulnerability
It was discovered that FreeType had a flaw in its CID font loader. An attacker could possibly use this issue to cause FreeType to consume excessive memory and CPU…
-
Breaches via DataBreaches.net
Self-described “cybersecurity engineer” arrested after computer case reopened
Natalie Dreier reports: A Florida man who calls himself a “cybersecurity engineer” on TikTok and Twitch was arrested after police reopened an investigation closed…
-
Threat Intel via DataBreaches.net
Japan hands over ‘Qilin’ hacker group member to Germany
JiJi reports: Japanese police have captured a Russian national believed to be a key member of the “Qilin” international hacker group and extradited him to Germany…
-
Breaches via DataBreaches.net
Denmark Central Person Register (CPR) Breach: Cyberattack Exposes Data of 8.8 Million
Rescana’s new report on a breach affecting the Denmark Central Person Register (CPR) summarizes the situation: On October 5, 2026, Danish authorities publicly disclosed…
-
Breaches via DataBreaches.net
ASOS customers receive ‘hack’ notification threatening leak
Sarah Butler reports: ASOS is investigating after users of its mobile app received a notification claiming hackers had “fully compromised” the online fashion retailer’s…
-
Vulnerabilities via CISA
Hitachi Energy REB500
View CSAF Summary Hitachi Energy is aware of open-source software vulnerabilities that affect REB500 product versions listed in this document. These vulnerabilities can…
- Advertisement
-
Vulnerabilities via CISA
Hitachi Energy Asset Suite
View CSAF Summary Hitachi Energy is aware of unauthenticated servlet access vulnerabilities that affect Asset Suite product versions listed in this document. These…
-
Vulnerabilities via CISA
Johnson Controls EasyIO FG
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain full unauthorized access to the device. The following versions of…
-
Vulnerabilities via CISA
Hitachi Energy SOI
View CSAF Summary Hitachi Energy is aware of RCE (Remote Code Execution) vulnerability in Apache ActiveMQ component of SOI product versions listed in this document…
-
Vulnerabilities via CISA
Savannah lwIP SMTP client
View CSAF Summary Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution.
-
Vulnerabilities via CISA
Hitachi Energy RTU500
View CSAF Summary Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting end-of-life RTU500 CMU…
-
Breaches via NCSC UK
Incident affecting ASOS customers
ASOS has said it is investigating a cyber incident and that some customer personal information may have been accessed.
-
Vulnerabilities via Ubuntu Security
USN-8880-1: FreeRDP vulnerabilities
It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause FreeRDP to crash…
-
Vulnerabilities via The Hacker News
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There is no…
-
AI Security via SecurityWeek
Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks
Citing growing risks posed by more capable and autonomous AI agents, Apple will introduce additional controls.
-
Threat Intel via SANS Internet Storm Center
ISC Stormcast For Tuesday, October 6th, 2026 https://isc.sans.edu/podcastdetail/10124, (Tue, Oct 6th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
-
Breaches via Infosecurity Magazine
ASOS Customers Receive Bizarre “Hacked” Message Amid Suspected Snowflake Compromise
ASOS customers have received a seemingly legitimate push notifications claiming the retailer’s IT systems have been breached through a Snowflake breach
-
AI Security via BleepingComputer
Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits
The Wikimedia Foundation says rogue OpenAI agents made unauthorized Wikipedia edits and may have been partially responsible for a May outage.