-
Stopping a cyberattack while walking your dog – defensive AI security CEO says it’s not ruff to do
Corma CEO Alon Pluda says his AI security startup aims to close the “defense gap,” where models are better at offensive …
-
Why Do So Many Apps Ask for Phone Number Verification?
For users, it may feel like one more registration step. For app developers and businesses, however, phone verification solves several …
-
CVE-2026-74797 – OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu …
OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command when processing maliciously-crafted .zip …
-
CVE-2026-74796 – OpenTofu before 1.11.7 fails to validate existing symlinks in the provider cache …
OpenTofu before 1.11.7 fails to validate existing symlinks in the provider cache directory during initialization. Attackers can place a …
-
CVE-2026-74795 – Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its …
Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a …
-
CVE-2026-74794 – Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering …
Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to …
-
CVE-2026-74792 – Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability ...
Scriban before 7.0.0 (affected versions
-
CVE-2026-74791 – Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when …
Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to …
-
CVE-2026-74790 – Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering …
Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext …
-
CVE-2026-74789 – Scriban before 7.0.0 (affected <= 6.6.0) applies its LoopLimit constraint only to script ...
Scriban before 7.0.0 (affected
-
CVE-2026-74788 – Scriban before 7.0.0 (affected versions <= 6.6.0) contains an uncontrolled memory ...
Scriban before 7.0.0 (affected versions
●●●
NVD
- CVE-2026-74797 – OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu …
- CVE-2026-19920 – A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is …
- CVE-2026-19921 – A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by …
- CVE-2026-19919 – A vulnerability was found in code-projects Online Shopping System 1.0. This impacts an …
- CVE-2026-19918 – A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This …
EXPLOITS
- LuCI DHCPv6 – Lease Hostname Stored Cross-Site Scripting
- mcp-server-kubernetes 3.8.x – Argument Injection
- PraisonAI praisonaiagents 1.6.77 – Remote Code Execution
- Apache Gravitino 1.2.1 – SSRF
- Blocksy Companion 2.1.46 – RCE
SECURELIST
- APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit
- Armored Likho expands its cyber-espionage toolkit
- Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver Pha
- Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selectio
- IT threat evolution in Q2 2026. Mobile statistics