-
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a …
-
Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists
Despite Illinois’ sanctuary laws, local police in and around Chicago helped ICE investigative agents track activists engaged in First …
-
Attackers Tampered with AOMEI Backupper’s Update Servers for Minutes to Deliver a Backdoor
Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor’s own update servers, in windows of five to ten minutes …
-
Claude Code Desktop Flaw Let Malicious HTML Steal Developer Credentials
Noma Labs found a high-severity Claude Code Desktop flaw that let malicious HTML files steal local credentials and private keys through the …
-
UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing
Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted …
-
Security Guard Assaulted in What Police Call a Hate Crime
A security guard was punched in the face twice, held in a chokehold and told to “go back to [his] country” in an attack police have …
-
AI Hacking Breach Hits 16 Financial Institutions, Leaks 100,000 Records
Shinhan KB Kookmin BNK Busan Hana Four savings banks: Yegaram Welcome DB OK And other institutions such as credit finance organizations, …
-
Networking problems after the October 2026 Windows update? NTLM might be to blame
The October 2026 Windows security update may break networking for some customers who are still clinging to long-deprecated NTLMv1 security. …
-
OpenAI Claims Model Helped Solve Insider Threat Concern
In a social media post, the company stated that it used its own models to “to understand the device and where it had come from” and …
-
Eiliko robot companion exposes private chats and can be hijacked
The Verge reports that Eiliko, a small AI robot companion made by Energize Lab, has serious security flaws that expose private …
-
Attack on BAE-managed system disrupts US bankruptcy courts
The US’ bankruptcy courts are currently down owing to what officials are calling a “cybersecurity incident.” The Administrative Office …
●●●
NVD
- CVE-2026-75941 – A potential vulnerability was reported in the Lenovo Legion Zone application, distributed …
- CVE-2026-111210 – A vulnerability was determined in bitcoinj up to 0.17. Affected is the function …
- CVE-2026-16754 – A potential improper certificate validation vulnerability was reported in Lenovo Smart …
- CVE-2026-16755 – A potential vulnerability was reported in Lenovo Smart Camera C33, distributed …
- CVE-2026-97380 – MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies