-
Upgrade to Microsoft Windows 11 Home for Just $12
You can now upgrade up to five computers to Microsoft Windows 11 Home for one low price and get a new sleek interface, advanced tools and …
-
Fireworks AI gets burned twice as customer data exposure widens
Fireworks AI has disclosed another cyberattack in October and a wider customer data exposure involving billing records, datasets, and …
-
AI reverse engineering let researchers add a new feature to Slack
Intezer researchers used AI agents to rebuild source code for Slack, Apple’s Finder and a TinyTurla-NG sample, from a backdoor family …
-
Cloud Vulnerabilities Surge Fourfold in Less Than a Year
The median number of high or critical vulnerabilities in cloud workloads increased fourfold between May and November this year, due to the …
-
Dreeze raises $33 million to automate recovery of entire cloud applications
Dreeze emerged from stealth with $33 million in seed funding and announced the general availability of its Application Revival platform for …
-
One Identity Unveils Active Roles 8.6 with Enhanced Security and Administration
Active Roles 8.6: Cumulative security, feature and administration upgrades One Identity has introduced Active Roles 8.6, strengthening …
-
Update Chrome now to fix a flaw attackers are exploiting
On November 9, Google issued a security update to Chrome’s Stable channel for Windows, Mac, and Linux. The update is rolling out over …
-
Commvault unveils Recovery Studio, AgentRecover update and joint work with three partners
Data protection provider Commvault Systems Inc. today used its SHIFT 2026 customer event to unveil Recovery Studio, a new service that will …
-
Before you buy an advent calendar, check these warning signs
Advent calendar buying guides are already appearing across the holiday shopping coverage this year. Social media can also put unfamiliar …
-
CISA tweaks cyber incident form to spot attacks that might be linked
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its online incident reporting form to help analysts spot when …
-
Chrome zero-day whack-a-mole continues as 2026 tally hits 8
Google has patched its eighth actively exploited Chrome zero-day of 2026, matching its total for the whole of last year with nearly two …
●●●
NVD
- CVE-2026-125078 – A security flaw has been discovered in SourceCodester Smart Attendance System with QR …
- CVE-2026-117477 – KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection …
- CVE-2026-125076 – A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner …
- CVE-2026-125077 – A vulnerability was determined in SourceCodester Smart Attendance System with QR Code …
- CVE-2026-124913 – Site isolation issue in the Networking component. This vulnerability was fixed in Firefox …
EXPLOITS
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
- Synametrics Syncrify 6.2 – command execution
SECURELIST
- IT threat evolution in Q3 2026. Mobile statistics
- IT threat evolution in Q3 2026. Non-mobile statistics
- Virtualization security: attack layers and misconfiguration impact
- The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603
- MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT dev