-
Hackers obtain counterfeit TLS certificates for Google and other large services
Attackers hijacked three top-level domains and used their control to mint counterfeit TLS certificates for Google and other large …
-
Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan
Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and …
-
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Cybersecurity researchers have disclosed details of a “human-operated phishing platform” that impersonates advertising products for …
-
AI Agents Leaked 13,000 Screenshots: Why Enterprise Approval Controls Failed
A reported leak of 13,000 screenshots shows how AI agents can bypass weak approval and audit controls even when organizations have written …
-
Improving SPIRE security and resiliency with AWS managed services
as a core component of their workload identity strategy. SPIFFE is a set of open source standards for securely identifying software systems …
-
Researchers Determine That 2,514 Cybersecurity Events Occur Each Second
The Comcast Business 2026 Cybersecurity Threat Report analyzed 79.3 billion cybersecurity events detected across its cybersecurity …
-
Incident affecting ASOS customers
ASOS has said it is investigating a cyber incident and that some customer personal information may have been …
-
Denmark’s CPR breach: 14 million lookups in ten days, found through a bill
Unknown users have pulled names, addresses and ID numbers on about 8.8 million people from Denmark’s Central Person Register (CPR). They …
-
Wikimedia Foundation comes forward as latest OpenAI agent assault victim
Wikipedia’s parent organization says that OpenAI agents edited some non-public wiki pages and generated traffic that may have contributed …
-
Trump Mobile customers’ data dumped – and some never even received their gold device
If you signed up for Trump Mobile, you may be part of an exclusive club of … ransomware victims. Criminals called BYOD claim to have …
-
Frontline Education Data Breach Highlights Third-Party Risks
Michael Centrella, Head of Public Policy at SecurityScorecard, comments, “School districts entrust vendors with sensitive employee …
-
Mississippi City Discloses Ransomware Incident
Michael Centrella, Head of Public Policy at SecurityScorecard, comments, “Protecting emergency services is only one part of a city’s …
●●●
NVD
- CVE-2026-105764 – Immich is a high-performance self-hosted photo and video management solution. Prior to …
- CVE-2026-105471 – A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up …
- CVE-2026-105762 – Dify is an open-source LLM app development platform. Prior to 1.13.0, the …
- CVE-2026-105763 – Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 …
- CVE-2026-98372 – In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies