-
Anthropic signs CrowdStrike, Hitachi and 9 more to defend power and water
Anthropic will give its frontier Claude models, engineers and threat research to the companies that guard critical infrastructure. That …
-
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source …
-
AI Agents, Local Hardware, and Security Risks Reshape Tech
Explore the latest tech news, from ChatGPT’s interactive AI tools and Microsoft’s new hardware to cybersecurity threats, robotics, and Big …
-
Fraudster who targeted ransomware victims appears in US court
Zohar Pinhasi stands accused of duping distressed ransomware victims by offering fake cyber services that he could not …
-
AWS AgentCore security undone by prompt requesting credentials
Bob, possibly the same Bob whose conversations with Alice draw so much interest from eavesdropping Eve, was browsing a site we’ll call …
-
NCSC and pals call out company that backed Chinese state hackers
The NCSC’s joint advisory names perennial offender Integrity Technology, accusing it of facilitating cyber attacks on behalf of Flax …
-
FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack
The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X. …
-
MonsterCloud CEO Zohar Pinhasi Accused of Paying Hackers, Defrauding Victims
The DOJ accuses MonsterCloud CEO Zohar Pinhasi of secretly paying ransomware gangs for decryption keys while charging victims hefty …
-
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. …
-
A Complete Guide to Diamond Grille Security Doors for Melbourne Homes
Drive down almost any street in Melbourne’s suburbs and you’ll spot them: front doors framed by a criss-cross pattern of metal …
-
8,500+ European Wind, Solar Systems Exposed
The Dutch National Cyber Security Centre (NCSC-NL) and cybersecurity organization Modat discovered more than 8,500 exposed systems linked …
-
$10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack
The US State Department is offering up to US $10 million for information about the whereabouts of Zhang Yu, a 44-year-old Chinese national …
●●●
NVD
- CVE-2026-107888 – OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() …
- CVE-2026-107889 – A flaw was found in the login theme rendering component of Keycloak. The issue occurs …
- CVE-2026-107885 – OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the …
- CVE-2026-75350 – EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the …
- CVE-2026-107886 – OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies