Coverage tagged "Vulnerability".
Anthropic on Friday said it's cutting off live internet access for all its internal evaluations following the discovery of new incidents in which its artificial intelligence (AI) models exhibited…
Posted by Alan Coopersmith on Oct 09 https://cert.pl/en/posts/2026/10/CVE-2026-75818/ says:
Posted by Alan Coopersmith on Oct 09 https://github.com/cyrusimap/cyrus-sasl/issues/891 points out there are a number of publicly reported security issues in the Cyrus SASL project, with no response…
Serial number: AV26-1026 Date: October 9, 2026 As of October 8, 2026, SmarterTools is affected by a vulnerability in the following product: SmarterMail Prior to Build 9777 The Cyber Centre encourages…
Serial Number: AV26-1024 Date: October 9, 2026 As of October 8, 2026, MongoDB is affected by vulnerabilities in the following products: Go Driver Prior to 2.9.0 Prior to 2.9.2 libmongocrypt Prior to…
Serial number: AV26-1025 Date: October 9, 2026 As of October 8, 2026, Hewlett Packard Enterprise is affected by vulnerabilities in the following products: HPE Intelligent Management Center (iMC)…
Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners.
For decades, cybersecurity programs operated on a basic assumption: attackers had limited time, resources, and specialized expertise. Reconnaissance took days. Vulnerability research took weeks.
Updated an acknowledgement. This is an informational change only.
Compared with GPT-6 Sol, GPT-6.1 Sol writes 39% more code, lifts its pass rate by 2.20 points, and produces fewer findings per line on every measure we track. GPT-6.1 Sol writes more code than either…
Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). "It's an opt-in service informed by our…
Hundreds of internet-exposed graphics processing unit (GPU) servers were open to a high-severity flaw in NVIDIA’s DCGM Exporter (CVE-2026-47483) that lets unauthenticated attackers crash the…
The customer data stolen from global fashion retailer ASOS includes more than just names and contact details, raising questions about its early reassurances. As we reported earlier this week, ASOS…
Posted by Colm O hEigeartaigh on Oct 09 Severity: moderate Affected versions: - Apache CXF 4.2.0 before 4.2.4 - Apache CXF 4.0.0 before 4.1.9 - Apache CXF before 3.6.13 Description: Improper…
Posted by Colm O hEigeartaigh on Oct 09 Severity: low Affected versions: - Apache CXF (org.apache.cxf:cxf-rt-rs-extension-search) 4.2.0 before 4.2.4 - Apache CXF…
Anthropic’s OSS Scanner is a new, free service that uses the company’s strongest AI models to find security vulnerabilities in open-source software. Maintainers who opt in receive periodic scans and…
A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then…
Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access…
Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest pays researchers to show…
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
