-
Reduce alert fatigue by customizing threat detection features in Amazon GuardDuty
is a threat detection service that continuously monitors, analyzes, and processes Amazon Web Services (AWS) data sources and logs in your …
-
AI-driven managed security startup Daylight raises $80M on 40-fold revenue growth
Managed detection and response startup Daylight Security Inc. today revealed that it has raised $80 million in new funding after what it …
-
November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far
It’s another doozy of a Patch Tuesday, with Microsoft fixing 1,094 bugs in its products, including one that attackers exploited before …
-
The US wants its quantum lead to turn into factories and supply chains
Policymakers from Congress and the executive branch are looking for ways to further boost the U.S. quantum computing industry, including by …
-
After the Cyberattack, Can You Trust the Machine?
Bringing a refrigeration controller back online doesn’t tell a supermarket manager if the food inside is still safe to sell. Somebody …
-
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Grok Build, the vibe-coding agent from SpaceXSI, is leaking data—some of it proprietary business information and other sensitive …
-
Ring robots ready to patrol paranoids’ pads
If you didn’t have any privacy concerns about slapping a Ring doorbell on your front door or putting Ring cameras inside, you’ll love …
-
AWS refreshes ProcessUnity Global Risk Exchange assessment to enhance customer’s third-party due diligence
is pleased to announce renewal of the AWS ProcessUnity Global Risk Exchange assessment. This validated assessment report helps customers …
-
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA has added six new vulnerabilities to its Known …
-
SAP’s November Security Update Fixes Four Vulnerabilities Rated 10.0
SAP released 35 new security notes on November 10, 2026, including fixes for four vulnerabilities that received a 10.0, the highest score …
-
Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem
Three distinct threat activity clusters with shared infrastructure and malware code similarities have been observed targeting …
-
Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited …
●●●
NVD
- CVE-2026-125078 – A security flaw has been discovered in SourceCodester Smart Attendance System with QR …
- CVE-2026-117477 – KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection …
- CVE-2026-125076 – A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner …
- CVE-2026-125077 – A vulnerability was determined in SourceCodester Smart Attendance System with QR Code …
- CVE-2026-40695 – Null pointer dereference for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel …
EXPLOITS
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
- Synametrics Syncrify 6.2 – command execution
SECURELIST
- IT threat evolution in Q3 2026. Mobile statistics
- IT threat evolution in Q3 2026. Non-mobile statistics
- Virtualization security: attack layers and misconfiguration impact
- The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603
- MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT dev