-
Experts Alarmed Over Gyazo’s Breach of 490 Million Metadata Records
Security experts have warned that a major data breach at a Japanese image-sharing service could pose a significant security and privacy …
-
Siemba brings continuous IDOR testing to production APIs
Siemba has announced automated testing for insecure direct object reference (IDOR) as part of its API Security Testing capability, which …
-
Hackers exploit Gyazo server flaw to steal 23.6 million user records
Japanese software company Helpfeel has confirmed a data breach on its screenshot-sharing platform Gyazo, in which attackers exploited a …
-
Revolut Customers Targeted with New Wave of Phishing Attacks
Hackers have seized on a data breach at digital financial firm Revolut to try and harvest more account information from customers, …
-
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access trojan (RAT) called ChainScript. …
-
A week in security (September 14 – September 20)
Last week on Malwarebytes Labs: New Android malware uses AI to steal bank logins and PINs Did an AI really try to break free from human …
-
Know what was tested before your SAP ECC migration goes live
In this Help Net Security interview, Guilherme Joventino, COO of MIGNOW, explains why some large companies plan to stay on ECC past the …
-
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based “much smaller organization” in …
-
Product showcase: Helmit alerts parents when online conversations show signs of trouble
Helmit is a parental control app that combines AI-powered social media monitoring with screen time management, web filtering, location …
-
Gopass: Open-source command-line password manager for teams
Gopass is a free, open-source password manager that stores credentials in an encrypted store and runs from the command line. Its …
-
Intent injection attacks are a new worry for AI-native 6G networks
Intent-based networking (IBN) lets operators state the outcome they want and leaves its translation into network policy to software, an …
-
AI compliance issues hit 2 in 5 large companies, and legacy workflows are a big factor
Forty percent of large companies had an AI-related compliance or governance issue in the past 12 months, according to 1,000 senior IT, …
●●●
NVD
- CVE-2026-94098 – A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This vulnerability …
- CVE-2026-94095 – A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this …
- CVE-2026-94096 – A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue …
- CVE-2026-94097 – A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an …
- CVE-2026-94149 – A vulnerability was identified in Omega Solution HRM OS up to 20260717. The affected …
EXPLOITS
- CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth – ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
- Metabase 0.61.0 – Authenticated Remote Code Execution
- FreePBX 17.0.2 – Remote Code Execution (RCE)
- Ghost_CMS 6.19.0 – Remote Code Execution
- Bludit CMS 3.20.0 – Reflected Cross-Site Scripting
SECURELIST
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies
- Angry Birds: Toy Ghouls’ new toys
- Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa wit
- ValleyRAT masquerading as adware