-
The Internet goes on high alert after discovery of 8 compromised TLS certs
Security personnel around the world are on high alert Tuesday following the discovery of eight TLS certificates with private keys so weak …
-
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google’s Chrome Root …
-
BAE Systems Cyber Incident Disrupts US Bankruptcy Notices
A cyber incident affecting BAE Systems halted US bankruptcy notices, forcing federal courts to change service procedures and adjust some …
-
Chrome flags malicious commands that scammers pass off as fixes
Google is updating Chrome’s Enhanced Protection mode to detect scam websites and warn users when a page tricks them into copying a …
-
Remote Access Security Risks: Why Corporate VPNs Fail on Public Wi-Fi
A remote access policy usually assumes the tunnel will come up. On hotel and conference networks, it often does not, and nobody wrote down …
-
Swamped curl maintainers take low-level flaws public to survive vulnerability ‘avalanche’
An “avalanche of vulnerability reports” is forcing curl to move lower-severity cases into public view, reserving private handling for high …
-
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
Palo Alto Networks has disclosed that it’s continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma …
-
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet …
-
Only 7% of CISOs at Large Companies Own AI Governance
New research has discovered only 7% of Chief Information Security Officers (CISOs) operating in large organizations (companies with $10 …
-
Celigo launches MCP tool management for enterprise AI assistants and agent access
Intelligent automation startup Celigo Inc. today announced its Model Context Protocol Management platform, which will let information …
-
AOMEI Backupper servers hijacked for minutes at a time to push backdoor
An unknown number of AOMEI Backupper users had their computers infected with a backdoor through an unusually stealthy supply chain attack, …
-
Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites
A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and a security …
●●●
NVD
- CVE-2026-107366 – IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no …
- CVE-2026-112957 – ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the …
- CVE-2026-107400 – IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated …
- CVE-2026-105453 – IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 …
- CVE-2026-109126 – IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- The journey of a paper unicorn: adventures inside a modern warehouse
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom