Latest news
-
Vulnerabilities via SANS Internet Storm Center
HTTP QUERY Method: The Grey Zone Between GET And POST., (Fri, Sep 18th)
In June 2026 the IETF published RFC 10008[1], defining a new HTTP method: "QUERY". The HTTP protocol faced already by changes (HTTP/2, HTTP/3) but it’s the first new…
-
Vulnerabilities via oss-security
Exim Security Release 4.100.1
Posted by Solar Designer on Sep 18 Hi, Bernard Quatermass kindly brought this Exim release pre-announcement to the distros list (thanks!), but seems to have failed to…
-
via Wired
Flock Offers Employees Buyouts as Customers Flee
As dozens of cities end contracts for its controversial license plate readers, Flock is rolling out a voluntary severance program, WIRED has learned.
-
Vulnerabilities via oss-security
Suricata 8.0.7 released with 67 vulnerabilities fixed
Posted by Alan Coopersmith on Sep 18 https://forum.suricata.io/t/suricata-8-0-7-released/6467 states:
-
Breaches via DataBreaches.net
HHS’ Office for Civil Rights Settles HIPAA Investigation of Ambry Genetics for Security Rule Violations
WASHINGTON — September 17, 2026 — The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) today announced a settlement with Ambry Genetics…
-
AI Security via AI Incident Database
Former Costa Mesa Police Officer Pleads Guilty to Contacting His Mistress Thousands of Times Through Text, Phone Calls, and Social Media Messages, Including More than 100 Times in a Day, Illegally Accessing Confidential Law Enforcement Databases to Track
SANTA ANA, Calif. -- A former Costa Mesa police officer pleaded guilty to contacting his mistress thousands of times through text, telephone calls, and social media…
-
AI Security via AI Incident Database
Sisters sue Española over traffic stop they say was illegal
Two Rio Arriba County sisters have filed lawsuits against the city of Española, contending they were subjected to an illegal traffic stop after a surveillance camera…
-
AI Security via AI Incident Database
US woman falsely charged with bank theft sues for $10m over AI facial recognition
A Tennessee woman who was falsely charged with bank theft in North Dakota and jailed for six months has sued for $10m in damages, alleging in a federal lawsuit that…
-
AI Security via Simon Willison
Gemini Hacked Three Companies in First Known Breakout by Google’s AI
Gemini Hacked Three Companies in First Known Breakout by Google’s AI Gemini finally caught up on Felony Bench! The hacks, which the company confirmed on Friday, occurred…
-
Ransomware via ransomware.live
🏴☠️ Anubis has just published a new victim : Quest Group
Employee data, internal files, and a few unexpected discoveries.
-
Vulnerabilities via oss-security
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Posted by SOFIA ETCHEPARE DARONCO on Sep 18 FWIW PPPoE is quite ubiquitous, though normally for gateway ISP communication rather than anything in end user machines.
-
Ransomware via RansomLook
Quest Group By anubis
Employee data, internal files, and a few unexpected discoveries.
-
Ransomware via ransomware.live
🏴☠️ Panzer has just published a new victim : K3G Solutions Brazil
K3G Solutions is a Brazilian telecom/IT consulting company based in Manaus, providing network engineering, ISP support, monitoring, call-center, CDN, and colocation…
-
Vulnerabilities via Debian Security
DSA-6507-1 unbound - security update
https://security-tracker.debian.org/tracker/DSA-6507-1
-
Vulnerabilities via Debian Security
DSA-6508-1 chromium - security update
https://security-tracker.debian.org/tracker/DSA-6508-1
-
Ransomware via ransomware.live
🏴☠️ Lockbit5 has just published a new victim : hygear.com
yGear specializes in providing reliable and affordable on-site and on-demand hydrogen and industrial...
-
Ransomware via ransomware.live
🏴☠️ Lockbit5 has just published a new victim : forus.cl
Founded in 1980 and headquartered in Santiago, Chile, Forus is a provider of apparel. The company pr...
-
Threat Intel via Security Affairs
Brevo Supply-Chain Attack Infected Over 100,000 Websites
A Brevo supply-chain attack used compromised Cloudflare access to inject malware into websites, potentially affecting over 100,000 sites. Brevo, formerly known as…
-
Threat Intel via Schneier on Security
Friday Squid Blogging: On Squid Egg Sacs
Short essay about squid egg sacs. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation…
-
Ransomware via DataBreaches.net
Ransomware attack on Kansas county will affect some services
Joseph McCarty reports: A Kansas county’s government says it has been hit by a ransomware attack. Ellis County discovered the attack on parts of its information…