Coverage tagged "Vulnerability".
Serial number: AV26-976 Date: September 29, 2026 As of September 29, 2026, Mozilla is affected by vulnerabilities in the following products: Firefox ESR Versions prior to 153.4 Versions prior to…
Posted by Alan Coopersmith on Sep 29 Forwarded Message Subject: groff 1.24.2 released Date: Tue, 29 Sep 2026 02:54:35 -0500 From: G. Branden Robinson To: info-gnu () gnu org, info-groff () gnu org…
The AIxCC competition winner will analyze messaging app code and compiled binaries for vulnerabilities, with technology that could also help commercial customers secure their software.
A group of academics from VUSec and Scuola Superiore Sant'Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time (JIT) engines present in web browsers…
Serial number: AV26-975 Date: September 29, 2026 As of September 29, 2026, Hitachi Energy is affected by vulnerabilities in the following product: RTU500 series CMU firmware Prior to 12.7.8, 13.9.1…
The Dutch Institute for Vulnerability Disclosure (DIVD) suffered an AI-driven cyberattack that the organization described as "loud and very, very messy."
It was discovered that c-ares incorrectly handled certain query completion callbacks. An attacker could possibly use this issue to trigger a use- after-free or double-free, resulting in a denial of…
Serial number: AV26-974 Date: September 29, 2026 As of September 28, 2026, SUSE is affected by vulnerabilities in the following product: Rancher Prior to 0.12.19 Prior to 0.13.15 Prior to 0.13.16…
Kiteworks on Monday said it worked with federal intelligence authorities over the weekend as it identified and addressed a critical security vulnerability during the scheduled precautionary shutdown…
Kiteworks, a provider of secure file transfer and data-sharing tools, told customers Monday they could resume normal operations after a weekend-long precautionary shutdown prompted by what it called…
Updated an acknowledgement. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
AWS AgentCore SDK flaws could let attackers run commands in AI sandboxes and reach AWS credentials
Posted by Wenjun Ruan on Sep 29 Severity: moderate Affected versions: - Apache DolphinScheduler (org.apache.dolphinscheduler:dolphinscheduler-api) before 3.4.3 Description: An improper authorization…
Serial number: AV26-973 Date: September 29, 2026 As of September 28, 2026, FreePBX is affected by vulnerabilities in the following products: music Prior to 16.0.4 Prior to 17.0.6 ucp Prior to 16.0.39…
Posted by Wenjun Ruan on Sep 29 Severity: low Affected versions: - Apache DolphinScheduler (org.apache.dolphinscheduler:dolphinscheduler-api) before 3.4.3 Description: An authentication bypass…
Posted by Wenjun Ruan on Sep 29 Severity: low Affected versions: - Apache DolphinScheduler 3.2.0 before 3.4.3 Description: A missing authorization vulnerability exists in the…
“Is your WAF ready for frontier AI models?” We keep hearing this question from our customers, so we decided to find out. When it comes to exploiting applications, what LLMs are really good at is…
For Birthday Week, Cloudflare is helping one of the Internet’s core security protocols develop stronger protections against quantum downgrade attacks. To protect our customers and the Internet at…
In most organizations, AI agents are writing more and more of their code every day transitioning to agentic software factories. Code creation is abundant. Code confidence is not.
