Latest news
-
Threat Intel via The Hacker News
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity
Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords, resetting…
-
Threat Intel via The Record
Several German lawmakers and foreign policy staff received Apple warnings on spyware
Members of Germany's political elite were among the spyware targets in 99 countries that Apple personally warned recently.
-
Breaches via The Hacker News
Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes
Blockchain infrastructure provider Chainstack on Tuesday disclosed that it was targeted in a cyber attack that allowed an unauthorized party to gain access to some parts…
-
Vulnerabilities via oss-security
Re: Brotli CVE-2026-111497
Posted by Alan Coopersmith on Nov 03 Google Project Zero has now published their analysis at: https://project-zero.issues.chromium.org/issues/565308158
-
AI Security via TechCrunch
CrowdStrike to shell out nearly $500M for 2 AI security startups as the market for securing agents takes off
CrowdStrike said it will buy Fiddler AI, which makes AI agent observability software, and Dreadnode, which helps companies automate AI security testing.
-
Threat Intel via The Record
British businesses caught in Europe-wide supermarket fridge attacks
Supermarket and grocery store refrigerator controls across Europe were hacked in the early hours of Monday in the second such wave of attacks in recent weeks — following…
-
Vulnerabilities via Ubuntu Security
USN-8994-1: libvips vulnerabilities
It was discovered that libvips incorrectly handled certain PDF files with a page that defines a width but not a height. An attacker could possibly use this issue to…
-
Vulnerabilities via Ubuntu Security
USN-8993-1: SOGo vulnerability
It was discovered that SOGo used the client-supplied Origin header when constructing password reset links. A remote attacker could possibly use this issue to obtain…
- Advertisement
-
Vulnerabilities via Ubuntu Security
USN-8992-1: Shapelib vulnerability
It was discovered that the shpsort utility in Shapelib incorrectly handled certain inputs, leading to a double free. An attacker could possibly use this issue to cause a…
-
Vulnerabilities via Ubuntu Security
USN-8991-1: rxvt-unicode vulnerability
It was discovered that rxvt-unicode incorrectly handled certain escape sequences. An attacker could possibly use this issue to execute arbitrary code if a user displayed…
-
Vulnerabilities via Ubuntu Security
USN-8990-1: Sprockets vulnerability
It was discovered that Sprockets incorrectly handled certain specially crafted requests when the Sprockets server was used in production. A remote attacker could…
-
Vulnerabilities via Ubuntu Security
USN-8988-1: Relax-and-Recover vulnerability
It was discovered that Relax-and-Recover created a world-readable initrd when GRUB_RESCUE was enabled. A local attacker could possibly use this issue to obtain sensitive…
-
Vulnerabilities via Ubuntu Security
USN-8987-1: libuser vulnerabilities
It was discovered that libuser did not properly validate the GECOS field when changing user information. A local attacker could possibly use this issue to corrupt the…
-
Vulnerabilities via Ubuntu Security
USN-8986-1: Swift Mailer vulnerability
Dawid Golunski discovered that Swift Mailer did not properly sanitize e-mail addresses in the mail transport. A remote attacker could possibly use this issue to pass…
-
Vulnerabilities via Ubuntu Security
USN-8985-1: Net::EasyTCP vulnerability
It was discovered that Net::EasyTCP used the built-in Perl rand() function to generate encryption keys when no strong randomization module was present. An attacker could…
-
Vulnerabilities via Ubuntu Security
USN-8984-1: jabberd2 vulnerability
It was discovered that jabberd2 allowed SASL ANONYMOUS authentication even when it was not enabled in the configuration. A remote attacker could possibly use this issue…
-
Threat Intel via Microsoft Security
Fake-download campaign uses trojanized installers to deliver monetization payloads
Attack chain overview Mitigation and protection guidance Learn More Microsoft Threat Intelligence has identified an evolving fake-download campaign targeting users…
-
Ransomware via ransomware.live
🏴☠️ Settra has just published a new victim : marlo-inc.com
Racine, Wisconsin. Marlo Incorporated (marlo-inc.com) manufactures industrial water treatment systems — softeners, carbon filters, reverse osmosis units, deionization…
-
Threat Intel via Ars Technica
Google dismantles botnet secretly running on 1.3 million Android TV boxes
Google's Threat Intelligence Group says it has shut down a massive botnet called x.cpe. At its height, x.cpe ran on more than 1.3 million Android TV devices, and…
-
Threat Intel via CyberScoop
Europol dismantles investment scheme that impacted potential victims in 50 countries
Authorities arrested seven people allegedly involved in an investment fraud scheme that claimed potential victims in more than 50 countries, Europol said Tuesday…