Latest news
-
Vulnerabilities via Canadian Centre for Cyber Security
Zyxel security advisory (AV26-1114)
Serial number: AV26-1114 Date: November 3, 2026 As of November 3, 2026, Zyxel is affected by vulnerabilities in the following products: Zyxel GS1900 series switches…
-
Vulnerabilities via Ubuntu Security
USN-8971-1: GNOME Shell vulnerability
It was discovered that GNOME Shell did not properly validate icon dimensions when processing icons from a remote search provider. An attacker could possibly use this…
-
AI Security via SecurityWeek
CrowdStrike Reportedly Paying $495 Million for AI Security Firms Fiddler, Dreadnode
The acquisitions will add AI agent observability and automated AI security testing capabilities to the CrowdStrike Falcon platform.
-
Threat Intel via Malwarebytes Labs
A hidden backdoor put 1.3 million TV boxes to work for criminals
Videostrong planted a backdoor in more than 1.3 million Android set-top boxes and sold criminals access to the resulting botnet.
-
Vulnerabilities via Ubuntu Security
USN-8970-1: GVfs vulnerabilities
It was discovered that GVfs did not properly validate data returned by an SFTP server. A remote attacker could possibly use this issue to obtain sensitive information…
-
Vulnerabilities via Help Net Security
Novee puts forgotten internet-facing assets through penetration testing
Novee’s External Surface Testing is a new capability in its AI penetration testing platform that helps security teams discover internet-facing assets and validate…
-
AI Security via Bishop Fox
AI Findings are Cheap to Find & Costly to Trust
AI can produce a plausible vulnerability report in seconds, but proving it is real still takes expert judgment. This post explores the economics of false positives, why…
-
AI Security via Dark Reading
3AM Affiliate Embraces AI-Like Loops in European School Attack
Evidence suggests a model may have generated and revised commands during the ransom gang's breach, though researchers stopped short of claiming full automation.
- Advertisement
-
Ransomware via BleepingComputer
UK school estate hit by 3AM ransomware in suspected AI-assisted attack
A 3AM ransomware affiliate targeted a school estate in the UK and successfully encrypted around 37 of nearly 50 machines reached from an unmanaged host.
-
Vulnerabilities via Cloudflare
Introducing Zero Wire, a hub for investigating critical Internet vulnerabilities
You run security at your organization. It’s 7:00 am, and you’re having breakfast. You receive a ping: a new critical vulnerability has been disclosed.
-
Ransomware via Help Net Security
Assured helps recovery teams find clean backups after ransomware attacks
Assured Data Protection has announced CleanRoom SCAN, a new managed service designed to strengthen cyber recovery by independently scanning isolated backup data using…
-
AI Security via Check Point Research
Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles
Key Points Check Point Research analyzed the Haiou jailbreak bundle, a prompt package targeting OpenAI Codex. Such jailbreaks are designed to weaken model guardrails and…
-
Threat Intel via The Record
Russia dismantles infrastructure of VasyGrek cybercrime group, detains three suspects
Russia's Interior Ministry said Monday that police had dismantled the group's infrastructure and identified its suspected members following an investigation conducted…
-
Vulnerabilities via Ubuntu Security
USN-8969-1: Bind vulnerabilities
It was discovered that Bind incorrectly handled certain DNS messages with repeated singleton records such as SOA, CNAME, or DNAME records. A remote attacker could…
-
Threat Intel via Infosecurity Magazine
Cyber-Attack on Refrigeration Systems Hits Supermarkets Across Europe
The incident has reportedly resulted in temperatures being changed on supermarket refrigerators, reminiscent of an attack that affected French retailers last month
-
Threat Intel via The Record
Russia-linked cyber spies target Ukraine's war crimes investigations, military aid routes
The hackers use relatively simple malware to steal sensitive documents, login credentials and other information from Ukrainian organizations, particularly those near the…
-
Threat Intel via BleepingComputer
Police seizes over 100 servers in investment scam crackdown
European law enforcement authorities arrested seven suspects and seized more than 100 servers in a joint action targeting an unnamed company suspected of providing…
-
AI Security via Wiz
The ROI of Agentic Remediation: Real-World Results with Wiz Green Agent
Learn how Fireblocks, Rogo, and project44 used Green Agent to eliminate cross-team blockers and accelerate critical risk resolution.
-
Threat Intel via Help Net Security
Attackers exploit critical Node-RED flaw to deploy Linux bot and backdoors (CVE-2026-58115)
Attackers are exploiting an authentication flaw (CVE-2026-58115) in Node-RED, a programming tool built into some industrial control products, to install a Linux bot and…
-
Ransomware via ransomware.live
🏴☠️ Silentransomgroup has just published a new victim : G... R...
Redacted entry - full company name pending disclosure (FULL DATA TIMER active).