-
After the Cyberattack, Can You Trust the Machine?
Bringing a refrigeration controller back online doesn’t tell a supermarket manager if the food inside is still safe to sell. Somebody …
-
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Grok Build, the vibe-coding agent from SpaceXSI, is leaking data—some of it proprietary business information and other sensitive …
-
Ring robots ready to patrol paranoids’ pads
If you didn’t have any privacy concerns about slapping a Ring doorbell on your front door or putting Ring cameras inside, you’ll love …
-
AWS refreshes ProcessUnity Global Risk Exchange assessment to enhance customer’s third-party due diligence
is pleased to announce renewal of the AWS ProcessUnity Global Risk Exchange assessment. This validated assessment report helps customers …
-
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA has added six new vulnerabilities to its Known …
-
SAP’s November Security Update Fixes Four Vulnerabilities Rated 10.0
SAP released 35 new security notes on November 10, 2026, including fixes for four vulnerabilities that received a 10.0, the highest score …
-
Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem
Three distinct threat activity clusters with shared infrastructure and malware code similarities have been observed targeting …
-
Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited …
-
SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI’s inference …
-
Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones
A flaw in Git can let a malicious repository run an attacker’s code on a computer that clones it recursively, together with its submodules. …
-
Fireworks AI Confirms Wider Breach Affecting Customer Datasets, Model Weights and Notion AI Chats
Fireworks AI disclosed on Monday that its investigation into a security incident first reported early last month uncovered further …
-
Non-deterministic agents break the rules traditional software security was built on
AI agent security has become the critical gating factor for enterprises that want autonomous software doing real work. Unlike chatbots that …
●●●
NVD
- CVE-2026-125078 – A security flaw has been discovered in SourceCodester Smart Attendance System with QR …
- CVE-2026-117477 – KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection …
- CVE-2026-125076 – A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner …
- CVE-2026-125077 – A vulnerability was determined in SourceCodester Smart Attendance System with QR Code …
- CVE-2026-83528 – Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a …
EXPLOITS
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
- Synametrics Syncrify 6.2 – command execution
SECURELIST
- IT threat evolution in Q3 2026. Mobile statistics
- IT threat evolution in Q3 2026. Non-mobile statistics
- Virtualization security: attack layers and misconfiguration impact
- The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603
- MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT dev