Coverage tagged "Vulnerability".
Serial number: AV26-1085 Date: October 26, 2026 As of October 22, 2026, Google is affected by a vulnerability in the following product: Brotli Versions 1.0.3 to versions prior to v1.0.10 Versions…
This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere.
Updated an acknowledgement. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
This Cybersecurity Awareness Month's theme, "Securing the Next 250," asks us to look beyond vulnerabilities and consider what will make our digital systems resilient for generations.
Six Linux flaws were made public, including one with a working root exploit and no merged fix
Updated an acknowledgement. This is an informational change only.
Serial number: AV26-1084 Date: October 26, 2026 As of October 20, 2026, Red Hat is affected by vulnerabilities in the following products: Red Hat Enterprise Linux 10 All versions Red Hat Enterprise…
Serial number: AV26-1083 Date: October 26, 2026 As of October 26, 2026, Siemens is affected by a vulnerability in the following products: Mendix SAML (Mendix 10 compatible) Prior to V4.2.4 Mendix…
Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on October 24.
Serial number: AV26-1082 Date: October 26, 2026 As of October 20, 2026, IBM is affected by vulnerabilities in the following products: IBM App Connect Enterprise Versions 13.0.1.0 to 13.0.8.2 IBM…
In August, SonarQube Hunter Agent became generally available on SonarQube Cloud, giving teams a way to find the security flaws that pattern-based analysis misses. Broken access control, business…
Microsoft’s updates address two newly disclosed vulnerabilities in the .NET developer platform, as well as flaws not fully addressed in an earlier release
Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project's…
Fortinet rolled out security hardening updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator last week, but is keeping the details about the fixed vulnerabilities under…
Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what it writes changes…
Blue Initiative launches a new vulnerability database for IT and OT CVEs relevant to the maritime industry
arXiv:2610.31844v1 Announce Type: new Abstract: Protocol reverse engineering (PRE) is essential for understanding undocumented or proprietary communication formats, enabling security-critical tasks…
arXiv:2610.31923v1 Announce Type: new Abstract: As humanoid robots move from research laboratories toward deployment in human-centered environments such as homes, hospitals, and warehouses, safe…
arXiv:2610.31984v1 Announce Type: new Abstract: WebAssembly (Wasm) enables near-native performance for web applications through a portable and sandboxed execution model. However, its limited runtime…
