News · via SecurityWeek
HPE Patches Dozens of Critical Flaws in Networking Products
Eight max-severity security defects could lead to remote code execution and authentication bypass.
Vulnerability
Coverage tagged "Vulnerability".
News · via Canadian Centre for Cyber Security
Esri security advisory (AV26-1088)
Serial number: AV26-1088 Date: October 27, 2026 As of October 26, 2026, Esri is affected by vulnerabilities in the following product: ArcGIS Server Prior to 12.1 The Cyber Centre encourages users and…
News · via Horizon3.ai
Horizon3 Announces NodeZero Integration With Palo Alto Networks Cortex XSOAR
SAN FRANCISCO, October 27, 2026 — Horizon3, the AI-native proactive security leader, today announced the availability of its NodeZero® integration with Palo Alto Networks Cortex XSOAR on the Cortex…
News · via Malwarebytes Labs
Artificial Intimacy: Love and lies in the age of AI
AI is becoming a third wheel in relationships, increasingly playing a role in the most intimate parts of our lives. It shows up in the flirty first text, the polished dating profile, the therapized…
News · via The Hacker News
OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections
OpenAI's compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model's hidden reasoning out in plain text, security firm Xint has shown. OpenAI's…
News · via SecurityWeek
Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products.
News · via Help Net Security
71% of vulnerability exploitation starts within a week of disclosure
Attackers are exploiting newly disclosed security flaws within days, leaving organizations little time to respond, according to Rapid7’s Q3 2026 Quarterly Threat Landscape Report. The company…
News · via Help Net Security
Cybersecurity jobs available right now: October 27, 2026
Cybersecurity Expert / Penetration Tester Barrion | Sweden | On-site – View job details As a Cybersecurity Expert / Penetration Tester, you will test web applications and APIs for authentication…
News · via arXiv cs.CR
Secure and Functional Code Generation with Self-Evaluation
arXiv:2610.33450v1 Announce Type: new Abstract: Large Language Models (LLMs) can generate functionally correct code that remains insecure. Security-focused fine-tuning can be expensive and is not…
News · via arXiv cs.CR
VulDec: Vulnerability Detection in Binaries via Neural Decompilation
arXiv:2610.33716v1 Announce Type: new Abstract: Automated vulnerability detection in binary executables is challenging due to the lack of source code and the limited semantic information available at…
News · via arXiv cs.CR
Enhancing LLM-Based Vulnerability Detection via Representation-Aware Logical Ensemble
arXiv:2610.33756v1 Announce Type: new Abstract: Automated vulnerability detection in C source code is a long-standing challenge, as traditional static analysis tools often trade precision for…
News · via JFrog Security Research
The Impact of AI on CVEs: Industry Challenges
Integrating artificial intelligence into cybersecurity has fundamentally changed vulnerability research - and not necessarily for the better. For decades, discovering and verifying Common…
News · via oss-security
Godot 4.x: arbitrary code execution via .po translation file Plural-Forms header
Posted by Tomasz Kaye on Oct 26 A code-execution vulnerability in Godot 4.x translation loading was publicly disclosed on 2026-10-26 [1]. Affected versions: Godot 4.1.0 through 4.7.2…
News · via Canadian Centre for Cyber Security
HashiCorp security advisory (AV26-1087)
Serial Number: AV26-1087 Date: October 26, 2026 As of October 26, 2026, HashiCorp is affected by a vulnerability in the following products: Consul Prior to 2.1.0 Consul Enterprise Prior to 1.21.19…
News · via BleepingComputer
Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches
A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.
News · via Ubuntu Security
USN-8956-1: Brotli vulnerability
It was discovered that Brotli incorrectly handled certain compressed streams. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
News · via Canadian Centre for Cyber Security
Craft CMS security advisory (AV26-1086)
Serial number: AV26-1086 Date: October 26, 2026 As of October 23, 2026, Craft CMS is affected by vulnerabilities in the following products: CMS Prior to 4.18.9 Prior to 5.11.2 Commerce-mollie Prior…
News · via BleepingComputer
Microsoft releases emergency .NET patches for critical Brotli flaw
Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell.
News · via SecurityWeek
Industrial Vendors Check Products for PHP2Shell Vulnerabilities
Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities.
News · via SecurityWeek
Stolen AI Reasoning Could Help China Build Cheaper Rivals
Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making it cheaper to distill a rival AI.