Latest news
-
Vulnerabilities via oss-security
CVE-2026-59267: Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption
Posted by Arrigo Marchiori on Nov 03 Severity: CVSS 4.0: 5.8 (medium) CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/S:P Affected versions: - Apache…
-
Ransomware via ransomware.live
🏴☠️ Chaos has just published a new victim : darrequipment.com
Darr Equipment Co. is a family-owned, service first, industrial equipment supplier specializing in providing customized solutions to meet our clients' specific goals…
-
AI Security via TechCrunch
Ted Schlein’s Ballistic Ventures seeks $490M for new funds amid AI-driven cybersecurity boom
Cybersecurity focused Ballistic Ventures is seeking to raise $360 million for a new flagship fund and another $130 million for a separate investment vehicle.
-
Vulnerabilities via oss-security
CVE-2026-59264: Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer
Posted by Arrigo Marchiori on Nov 03 Severity: moderate Affected versions: - Apache OpenOffice through 4.1.16 Description: The Windows installers of Apache OpenOffice…
-
Vulnerabilities via oss-security
CVE-2026-59263: Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.
Posted by Arrigo Marchiori on Nov 03 Severity: CVSS 4.0: 1.9 (low) CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:P/S:P/AU:N/R:A/U:Green Affected…
-
Vulnerabilities via Canadian Centre for Cyber Security
WordPress security advisory (AV26-1117)
Serial number: AV26-1117 Date: November 3, 2026 As of October 31, 2026, WordPress is affected by a vulnerability in the following product: WordPress Core Prior to 7.1.4…
-
Ransomware via RansomLook
darrequipment.com By chaos
Darr Equipment Co. is a family-owned, service first, industrial equipment supplier specializing in providing customized solutions to meet our clients' specific goals…
-
Breaches via BleepingComputer
WorkOS says attacker used ARTEX AI to breach internal sales app
Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications.
- Advertisement
-
Vulnerabilities via oss-security
CVE-2026-111822: Apache ActiveMQ, Apache ActiveMQ Runtime Config: ActiveMQ retains write access after live ACL revocation
Posted by Christopher L. Shannon on Nov 03 Severity: important Affected versions: - Apache ActiveMQ 6.0.0 before 6.3.3 - Apache ActiveMQ before 5.19.12 - Apache ActiveMQ…
-
Vulnerabilities via oss-security
CVE-2026-111821: Apache ActiveMQ, Apache ActiveMQ KahaDB: Oversized client identifier strings poison the KahaDB journal
Posted by Christopher L. Shannon on Nov 03 Severity: important Affected versions: - Apache ActiveMQ 6.0.0 before 6.3.3 - Apache ActiveMQ before 5.19.12 - Apache ActiveMQ…
-
Vulnerabilities via oss-security
CVE-2026-108949: Apache ActiveMQ, ActiveMQ Broker: Repeated rejected temporary destination consumer requests can lead to broker OOM
Posted by Christopher L. Shannon on Nov 03 Severity: moderate Affected versions: - Apache ActiveMQ 6.0.0 before 6.3.3 - Apache ActiveMQ before 5.19.12 - ActiveMQ Broker…
-
Vulnerabilities via oss-security
CVE-2026-108946: Apache ActiveMQ, ActiveMQ Broker: The broker does not verify user provided connection id matches connection
Posted by Christopher L. Shannon on Nov 03 Severity: important Affected versions: - Apache ActiveMQ 6.0.0 before 6.3.3 - Apache ActiveMQ before 5.19.12 - ActiveMQ Broker…
-
Vulnerabilities via Chrome Releases
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 157 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks…
-
Vulnerabilities via oss-security
CVE-2026-108500: Apache ActiveMQ: LDAPAuthorizationMap allows authorization bypass via DN injection
Posted by Matt Pavlovich on Nov 03 Severity: Moderate Affected versions: - Apache ActiveMQ 6.3.0 before 6.3.3 - Apache ActiveMQ 5.19.0 before 5.19.12 - Apache ActiveMQ…
-
Vulnerabilities via oss-security
CVE-2026-103582: Apache ActiveMQ NMS OpenWire Client Library: Unbounded/Unvalidated Length Fields in Apache.NMS.OpenWire Unmarshalling (DoS)
Posted by Christopher L. Shannon on Nov 03 Severity: low Affected versions: - Apache ActiveMQ NMS OpenWire Client Library through 2.2.0 Description: Unbounded memory…
-
Threat Intel via ransomware.live
🏴☠️ Whitearmor has just published a new victim : Project Trojan Horse
DM us to sell your IA on $/%, working with all kinds of accesses depending on said target. Rules : - No companies under $500kk - No companies in the CIS conglomerate -…
-
Threat Intel via ransomware.live
🏴☠️ Falcon has just published a new victim : Buchanan Ingersoll & Rooney PC
Full-service law firm - Our 260 GB extraction includes full DynamicCRM export with account, contact and campaignresponse (includes names, emails, numbers), privileged…
-
Vulnerabilities via oss-security
OpenVox Server RCE and client impersonation vulnerabilities
Posted by Ben Ford on Nov 03 Hello from the OpenVox project. We released updates to mitigate two 9+ CVE vulnerabilities that affect all known OpenVox and Puppet versions…
-
Vulnerabilities via oss-security
CVE-2026-115448: Apache ZooKeeper: Unbounded recursion in snapshot serialization allows a client to render the server unrecoverable
Posted by Andor Molnar on Nov 03 Severity: CVSS 4.0: 8.7 (high) CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected versions: - Apache ZooKeeper…
-
Threat Intel via DataBreaches.net
Ukraine and Russia both report fake emergency alerts after cyberattacks target apps as limited ceasefire ends
AP reports: Authorities in Ukraine and Russia said their emergency alert mobile apps had been targeted by cyberattacks, with users in Ukraine receiving false warnings of…