-
Citrix NetScaler security snafus get even worse amid more 0-day reports
The attackers just keep coming after Citrix NetScaler appliances, as both the feds and private security researchers warn that someone found …
-
Apple adds new Full Disk Access controls on Macs because of AI agents
Apple will add new controls to Full Disk Access on the Mac. Users will only be able to give an app that level of access “with very …
-
Authenticated Doesn’t Mean Safe: Why AI Agents Need Action-Level Security
Disclaimer: The views shared here reflect my personal experience and should not be read as an official Microsoft …
-
FBI confirms ‘multiple’ arrests related to ShinyHunters hack
The FBI and law enforcement partners have arrested “multiple” suspects as part of an investigation into a September hack allegedly …
-
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes
Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an …
-
Security teams are starting to treat AI like staff, and that means managing it
Ask anyone who has worked in a security operations center what the job actually involves, and you’ll hear a lot about alerts. Thousands …
-
US judge rules a police Flock search was unconstitutional mass surveillance
A federal judge in Oklahoma has ruled that a deputy’s warrantless search of Flock’s licence plate reader network broke the US …
-
Debian’s latest kernel security update has 1,313 reasons to patch
The age of LLM-assisted security vulnerability discovery is really starting to bite. Debian’s latest Linux kernel security update comes …
-
WEBINAR: Introducing ADX Vision 2.0: Securing Generative and Agentic AI – Register Now!
AI has moved from assistant to actor. 86% of employees now use AI at work, and 49% use tools their organizations haven’t approved (Sapio …
-
Hackers Exploit 24 IoT Vulnerabilities to Install ClingSTUN Linux Backdoor
FortiGuard Labs has identified a Linux backdoor that exploits known vulnerabilities in internet-facing devices and converts infected …
-
Google pauses open source bug bounty program after rise in AI submissions
Companies like Google and Microsoft are find much bigger numbers of vulnerabilities in their own products as a result of AI. But the same …
-
⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
A blank field. A public …
●●●
NVD
- CVE-2026-105169 – A security flaw has been discovered in kishor-23 food-waste-management-system …
- CVE-2026-93323 – The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context …
- CVE-2026-105170 – A weakness has been identified in kishor-23 food-waste-management-system …
- CVE-2026-105168 – A vulnerability was identified in kishor-23 food-waste-management-system …
- CVE-2026-105171 – A security vulnerability has been detected in kishor-23 food-waste-management-system …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies