Latest news
-
Vulnerabilities via oss-security
[SECURITY] Apache Juneau 9.2.1 fixes multiple vulnerabilities (CVE-2026-73095, ..., CVE-2026-73117)
Posted by James Bognar on Nov 03 Apache Juneau 9.2.1, released on 2026-11-03, fixes the following vulnerabilities. All affect Apache Juneau through 9.2.0. Users are…
-
Threat Intel via DataBreaches.net
Syrian Man Sentenced for Wide-Ranging Hacking Conspiracy Conducted on Behalf of the Bashar Al Assad Regime
Ahmad Umar Agha (also known as Th3Pr0) had spent more than a decade as a fugitive for targeting of Western media entities, businesses, NGOs, and U.S. and allied…
-
AI Security via DataBreaches.net
A Defense Contractor Gave Their Personal AI Agent Access to a Secure Pentagon System
Vittoria Elliott reports: Earlier this year, sources tell WIRED, a contractor caused a security incident at the Department of Defense by connecting a secure centralized…
-
Threat Intel via DataBreaches.net
Hackers hit UNM hospital, then apologize and offer patients $2,500. In a new statement, they reveal more about the incident.
In more than 20 years of blogging about breaches, DataBreaches has never seen ransomware threat actors offer monetary compensation to patients affected by their attack…
-
Ransomware via DataBreaches.net
HHS’ Office for Civil Rights Settles Ransomware Investigation of Lehigh Valley Health Network
DataBreaches.net previously covered the 2023 Lehigh Valley Health Network breach by AlphV (aka “BlackCat”). The breach garnered a lot of public attention when the threat…
-
Breaches via DataBreaches.net
UK: Second Liverpool hospital investigates staff over breach of Southport attack patient records
ITV reports yet more insider snooping by hopsital employees in the wake of the Southport terror attack: A second hospital in Liverpool is carrying out an investigation…
-
Breaches via DataBreaches.net
CSX data breach exposes employee information
Jack Krumm reports: We’re learning more about a major data privacy breach and the tens of thousands of people nationwide who could be affected. CSX, one of the country’s…
-
Breaches via DataBreaches.net
CSX data breach exposes employee information
Jack Krumm reports: We’re learning more about a major data privacy breach and the tens of thousands of people nationwide who could be affected. CSX, one of the country’s…
- Advertisement
-
Vulnerabilities via oss-security
Xen Security Advisory 523 v2 (CVE-2026-102703,CVE-2026-102704) - arbitrary read/write via grant copy
Posted by Xen . org security team on Nov 03 Xen Security Advisory CVE-2026-102703,CVE-2026-102704 / XSA-523 version 2 arbitrary read/write via grant copy UPDATES IN…
-
AI Security via oss-security
Apache Traffic Server: heap-buffer-overflow via HTTP Host header (unbounded alloca pattern, 5 sites) — 90-day disclosure
Posted by feng on Nov 03 Apache Traffic Server: heap-buffer-overflow via HTTP Host header (unbounded alloca pattern, 5 sites) — 90-day disclosure Reporter: Innora…
-
Threat Intel via The Record
Google dismantles massive botnet hidden in Android TV boxes
The overwhelming majority of the infected devices in the X.CPE botnet are Android TV set-top boxes, Google said, adding that they observed a number of other infected…
-
Vulnerabilities via oss-security
CVE-2026-114442: Apache HertzBeat: incomplete XPath expression validation in aliasFields
Posted by Qingran Zhao on Nov 03 Severity: low Affected versions: - Apache HertzBeat 1.7.1 - Apache HertzBeat 1.7.2 - Apache HertzBeat 1.7.3 - Apache HertzBeat 1.8.0 -…
-
Breaches via TechCrunch
Researchers warned of North Korean hacking tactics years before record $6.3B Binance heist
Cybersecurity experts have long warned of the persistent and patient threat from North Korea's long-running hacks. The world's largest crypto exchange was still caught…
-
Threat Intel via oss-security
CVE-2026-74846: Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier
Posted by Robert Rothenberg on Nov 03 CVE-2026-74846 CPAN Security Group CVE ID: CVE-2026-74846 Distribution: Catalyst-Plugin-Authentication Versions: before 0.10029…
-
Threat Intel via Security Affairs
Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack
Binance reveals how fake job interviews, malware and internal AI abuse enabled attackers to steal $6.34 billion. The Binance security incident on October 29 shows how a…
-
Vulnerabilities via Chrome Releases
Chrome Stable for iOS Update
Hi everyone! We've just released Chrome Stable 157 (157.0.8103.37) for iOS; it'll become available on App Store in the next few hours. This release includes stability…
-
Threat Intel via Wired
Binance Says Hackers Used Well-Known Tricks to Carry Out a $6.34 Billion Heist
Suspected North Korean attackers duped an engineer with a fake job interview and a malicious download to gain a foothold in the crypto firm’s system and steal billions…
-
Threat Intel via CyberScoop
Oklahoma man charged with mailing threats, substances to election officials nationwide
An Oklahoma man has been charged with mailing suspicious white substances to election officials across the country. Robin Patrick Martin faces charges of conveying false…
-
AI Security via BleepingComputer
Google: LLMjacking attacks rack up $1 million in cloud AI charges
Large language model hijacking attacks, also known as LLMjacking, are generating large fraudulent cloud charges, with some organizations losing more than $100,000 per…
-
Vulnerabilities via Chrome Releases
Extended Stable Update for Desktop
The Extended Stable channel has been updated to 156.0.8078.88 for Windows and Mac which will roll out over the coming days/weeks. Security changes will be updated…