Coverage tagged "Vulnerability".
“I think we might lose public key cryptography.” ~Matthew Green The above is from Matthew Green, yesterday, who is a cryptographer at Johns Hopkins. OpenAI released over 700 mathematical proofs as a…
A now-patched vulnerability in AWS Bedrock AgentCore could've allowed an attacker to use one AI chatbot to take over an organization's entire fleet.
Let's Encrypt is continuing a push toward tighter security by reducing free SSL/TLS certificate lifetimes from 90 days to 64 days, starting February 10, 2027. For administrators already implementing…
Serial number: AV26-1022 Date: October 8, 2026 As of October 8, 2026, IBM is affected by vulnerabilities in the following products: IBM DataPower Gateway 10.5.0 Prior to or equal to 10.5.0.22 IBM…
It was discovered that libde265 did not properly validate certain crafted H.265 bitstreams, leading to a NULL pointer dereference. An attacker could possibly use this issue to cause libde265 to…
Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination Center (JPCERT/CC) said. The…
The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code execution.
Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary code with root privileges on Nexus…
Serial number: AV26-1021 Date: October 8, 2026 As of October 6, 2026, Elastic is affected by vulnerabilities in the following products: Elasticsearch Prior to or equal to 8.19.23 Prior to or equal to…
Serial number: AV26-1020 Date: October 8, 2026 As of October 7, 2026, Cisco is affected by vulnerabilities in the following products: Cisco Nexus 3000 Series Switches Multiple versions and models…
Serial number: AV26-1019 Date: October 8, 2026 As of October 7, 2026, HashiCorp is affected by vulnerabilities in the following products: Vault Community Edition Prior to 2.1.2 Vault Enterprise Prior…
Serial number: AV26-1018 Date: October 8, 2026 As of October 7, 2026, Splunk is affected by vulnerabilities in the following products: Splunk Enterprise Prior to 10.0.10 Prior to 10.2.7 Prior to…
It was discovered that libgit2 incorrectly handled IP address SubjectAltName verification in TLS certificate validation. A remote attacker with a CA-trusted certificate could possibly use this issue…
It was discovered that libarchive had a signed integer overflow in its ZIP writer when handling encrypted entries with sizes near the maximum value. An attacker could possibly use this issue to cause…
Anthropic’s Claude Haiku 5.5 model, designed for quick, repetitive workloads and speed-sensitive tasks, is now better at finding vulnerabilities and writing exploits than its predecessor. The company…
SEC Consult has published technical details on vulnerabilities mentioned in a complaint filed by several US states.
A critical vulnerability affecting eight Atlassian products, including Jira and Confluence, is being exploited in the wild, said VulnCheck
The country is consumed right now with debating artificial intelligence and whether increasingly powerful AI systems could escape human control. Those are valid concerns, but lawmakers are…
SOCRadar Freshdesk Integration: Track and Resolve Security Incidents as Tickets SOCRadar Incident Sync: new incidents are pulled every five minutes and opened as Freshdesk tickets tagged SOCRadar…
On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique zero-day vulnerabilities.
