-
Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction
A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November …
-
Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure
Russian authorities have arrested three suspected members of a threat group known as VasyGrek and dismantled its criminal infrastructure. …
-
Docker Urges Isolation and Governance for AI Agent Security
Docker has published a guide to five security risks that arise when AI agents are allowed to browse, run code and call tools with limited …
-
M&S takes more than a year to recover from cyber-attack as profits bounce back to £355m
Sales and profit from clothing and homeware remain below two years ago but ‘brand is in good health’ Marks & Spencer has said a …
-
Open-source file sync tool rsync 3.5.2 fixes a CPU exhaustion flaw
The rsync project released version 3.5.2, and it closes a flaw that let a connecting client tie up a server’s CPU with checksum math that …
-
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited …
-
What AI-generated malware looks like under the microscope
In this Help Net Security interview, Lindsay Kaye, VP of Threat Intelligence at HUMAN Security, talks about what AI-generated malware looks …
-
Ghostunnel: Open-source TLS proxy with mutual authentication
Ghostunnel is an open-source proxy that handles TLS for programs that cannot handle it themselves. It works in two …
-
Secure your containers without breaking what works
Container security has a familiar problem. Teams identify vulnerabilities, but turning those findings into lower risk is much …
-
Companies going all in on AI could see their strategy backfire
Four of the five highest-ranked enterprise risks in Gartner’s Quarterly Emerging Risk Report were AI-related. AI strategy miscalculation …
-
NIST publishes cybersecurity guide for businesses too small to have IT staff
The National Institute of Standards and Technology (NIST) released cybersecurity guidance for small businesses with no paid employees other …
-
In Kyiv, hackers sent fake alerts about a nuclear apocalypse. We hardly noticed | Diana Berg
xplosions woke me at 3am the other night. Sitting on the bathroom floor behind two load-bearing walls, scrolling through Telegram to see …
●●●
NVD
- CVE-2026-114550 – libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code …
- CVE-2026-62126 – Allocation of Resources Without Limits or Throttling vulnerability in miniOrange SAML SP …
- CVE-2026-114551 – MailEnable Auth Cleartext Storage Information Disclosure Vulnerability. This …
- CVE-2026-114549 – NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability. …
- CVE-2026-114552 – MailEnable parseObjectResponse XML External Entity Processing Information Disclosure …
EXPLOITS
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
- Synametrics Syncrify 6.2 – command execution
SECURELIST
- MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT dev
- CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
- Filter generation in practice: from algorithms to LLMs
- Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
- Millions of security cameras at risk: DoS vulnerability in Intelbras devices