-
EFF to San Francisco Police: Drones are Powerful Surveillance Tools That Require a Robust Policy
…
-
Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks
Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in …
-
Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks
Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been …
-
How we found 24 Android vulnerabilities using our open source AI security agent
With the rise of AI in the security space, our team created the GitHub Security Lab Taskflow Agent as a way for security researchers to …
-
As AI world debates security, NVIDIA releases open source tools for agents
Amid growing concerns from both the public and policymakers about cyberattacks involving advanced AI systems, NVIDIA has released a new …
-
Artifactory Vulnerabilities Under Active Exploitation Enable Authentication Bypass and Admin Access
Three Artifactory vulnerabilities under active exploitation enable authentication bypassing on Internet-accessible, self-hosted Artifactory …
-
RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims
RatHat’s operators build and publish the Android banking trojan and control infected phones from a web console, according to security …
-
Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M
The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party …
-
IAM for AI agents: A Practical Enterprise Framework
What is IAM for AI agents? AI agents authenticate, invoke tools, and act across enterprise systems with delegated …
-
Jewelbug Targets the Middle East and Asia via Cyber Espionage and Crypto Fraud Campaigns
Security.com recently published an analysis of a China-based hackers-for-hire group Jewelbug espionage con crypto fraud campaign that …
-
Previously Convicted Dutch Hacker Arrested in ShinyHunters Odido Probe
Pepijn van der Stap currently works as Offensive Security Lead at Dutch cybersecurity firm Neo Security. Dutch authorities have confirmed …
-
Kiteworks lifts shutdown order after incident-free weekend
Kiteworks customers are back up and running after a highly-unusual preemptive shutdown that came amid indications of an impending cyber …
●●●
NVD
- CVE-2026-100887 – A security flaw has been discovered in amirsanni …
- CVE-2026-100888 – A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This …
- CVE-2026-100753 – Joomla Extension – ordasoft.com – Reflected Cross-Site Scripting in Real Estate Manager …
- CVE-2026-100890 – A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this …
- CVE-2026-100889 – A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is …
EXPLOITS
- CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth – ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
- Metabase 0.61.0 – Authenticated Remote Code Execution
- FreePBX 17.0.2 – Remote Code Execution (RCE)
- Ghost_CMS 6.19.0 – Remote Code Execution
- Bludit CMS 3.20.0 – Reflected Cross-Site Scripting
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies