Latest news
-
Breaches via ransomware.live
🏴☠️ Incransom has just published a new victim : hillandbeyer.com
Hill & Beyer is a law firm that provides legal representation and related client services. Management at Hill & Beyer has been officially informed regarding a major…
-
Vulnerabilities via oss-security
CVE-2026-90628: Apache OpenOffice: Stack overflow in CFF hint handling
Posted by Arrigo Marchiori on Nov 03 Severity: important Affected versions: - Apache OpenOffice through 4.1.16 Description: An uncontrolled memory access in the PDF…
-
Vulnerabilities via oss-security
CVE-2026-90627: Apache OpenOffice: Local file inclusion via SQL provider and flat file database references
Posted by Arrigo Marchiori on Nov 03 Severity: important Affected versions: - Apache OpenOffice through 4.1.16 Description: The flat file database driver in Apache…
-
Vulnerabilities via oss-security
CVE-2026-90626: Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
Posted by Arrigo Marchiori on Nov 03 Severity: important Affected versions: - Apache OpenOffice through 4.1.16 Description: An uncontrolled memory access in the PDF…
-
Threat Intel via CyberScoop
Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements
A Delaware-based defense and aerospace company has settled a case with U.S. agencies over government allegations that the firm neglected its cybersecurity obligations in…
-
Vulnerabilities via oss-security
CVE-2026-90624: Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability
Posted by Arrigo Marchiori on Nov 03 Severity: important Affected versions: - Apache OpenOffice through 4.1.16 Description: An unchecked memory access in the PDF import…
-
Vulnerabilities via oss-security
CVE-2026-59268: Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader
Posted by Arrigo Marchiori on Nov 03 Severity: important Affected versions: - Apache OpenOffice through 4.1.16 Description: An out-of-bounds Write vulnerability in…
-
Vulnerabilities via oss-security
CVE-2026-59267: Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption
Posted by Arrigo Marchiori on Nov 03 Severity: CVSS 4.0: 5.8 (medium) CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/S:P Affected versions: - Apache…
- Advertisement
-
Ransomware via ransomware.live
🏴☠️ Chaos has just published a new victim : darrequipment.com
Darr Equipment Co. is a family-owned, service first, industrial equipment supplier specializing in providing customized solutions to meet our clients' specific goals…
-
AI Security via TechCrunch
Ted Schlein’s Ballistic Ventures seeks $490M for new funds amid AI-driven cybersecurity boom
Cybersecurity focused Ballistic Ventures is seeking to raise $360 million for a new flagship fund and another $130 million for a separate investment vehicle.
-
Vulnerabilities via oss-security
CVE-2026-59264: Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer
Posted by Arrigo Marchiori on Nov 03 Severity: moderate Affected versions: - Apache OpenOffice through 4.1.16 Description: The Windows installers of Apache OpenOffice…
-
Vulnerabilities via oss-security
CVE-2026-59263: Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.
Posted by Arrigo Marchiori on Nov 03 Severity: CVSS 4.0: 1.9 (low) CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:P/S:P/AU:N/R:A/U:Green Affected…
-
Vulnerabilities via Canadian Centre for Cyber Security
WordPress security advisory (AV26-1117)
Serial number: AV26-1117 Date: November 3, 2026 As of October 31, 2026, WordPress is affected by a vulnerability in the following product: WordPress Core Prior to 7.1.4…
-
Ransomware via RansomLook
darrequipment.com By chaos
Darr Equipment Co. is a family-owned, service first, industrial equipment supplier specializing in providing customized solutions to meet our clients' specific goals…
-
Breaches via BleepingComputer
WorkOS says attacker used ARTEX AI to breach internal sales app
Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications.
-
Vulnerabilities via oss-security
CVE-2026-111822: Apache ActiveMQ, Apache ActiveMQ Runtime Config: ActiveMQ retains write access after live ACL revocation
Posted by Christopher L. Shannon on Nov 03 Severity: important Affected versions: - Apache ActiveMQ 6.0.0 before 6.3.3 - Apache ActiveMQ before 5.19.12 - Apache ActiveMQ…
-
Vulnerabilities via oss-security
CVE-2026-111821: Apache ActiveMQ, Apache ActiveMQ KahaDB: Oversized client identifier strings poison the KahaDB journal
Posted by Christopher L. Shannon on Nov 03 Severity: important Affected versions: - Apache ActiveMQ 6.0.0 before 6.3.3 - Apache ActiveMQ before 5.19.12 - Apache ActiveMQ…
-
Vulnerabilities via oss-security
CVE-2026-108949: Apache ActiveMQ, ActiveMQ Broker: Repeated rejected temporary destination consumer requests can lead to broker OOM
Posted by Christopher L. Shannon on Nov 03 Severity: moderate Affected versions: - Apache ActiveMQ 6.0.0 before 6.3.3 - Apache ActiveMQ before 5.19.12 - ActiveMQ Broker…
-
Vulnerabilities via oss-security
CVE-2026-108946: Apache ActiveMQ, ActiveMQ Broker: The broker does not verify user provided connection id matches connection
Posted by Christopher L. Shannon on Nov 03 Severity: important Affected versions: - Apache ActiveMQ 6.0.0 before 6.3.3 - Apache ActiveMQ before 5.19.12 - ActiveMQ Broker…
-
Vulnerabilities via Chrome Releases
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 157 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks…