-
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance …
-
Microsoft Authenticator vulnerability let rogue Android apps steal work account access
If you use Microsoft Authenticator on Android, update it. Researchers at Enclave found a flaw that let any app on your phone quietly take …
-
Several AI security market categories are headed for bigger platforms
In this interview with Help Net Security, Jonathan Care, Lead Analyst and Practice Lead AI at KuppingerCole Analysts, compares AI security …
-
LLM agent security needs more than guardrails
Madhu Shashanka, Chief Scientist at Concentric AI, explains why securing LLM tools and agents depends more on your data than on the model. …
-
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell …
-
71% of vulnerability exploitation starts within a week of disclosure
Attackers are exploiting newly disclosed security flaws within days, leaving organizations little time to respond, according to Rapid7’s …
-
Amutable Foundations is a Linux system with no SSH and no package manager
Amutable opened signups for the private preview of Amutable Foundations, a Linux system in which each machine sends a signed report of the …
-
Cybersecurity jobs available right now: October 27, 2026
Cybersecurity Expert / Penetration Tester Barrion | Sweden | On-site – View job details As a Cybersecurity Expert / Penetration Tester, …
-
Japanese virtual desktop cloud hacked so hard it asks to be banned
Japanese ISP GMO Internet has warned customers the cloudy desktop service it offers as an ideal foreign exchange trading environment was …
-
Migration to safety: Three insights you may have missed from theCUBE’s coverage of DigiCert’s World Quantum Readiness Day 2026
Public key infrastructure, or PKI, modernization is taking on new urgency as organizations prepare for the security risks posed by quantum …
-
Fortinet extends FortiGate firewalls into AI security and adds new FortiAIGate features
Network security company Fortinet Inc. today extended its FortiGate firewalls into artificial intelligence security with the launch of the …
-
Worm armed 42 GitHub repos by hiding a payload too big to fail
A new Miasma-family npm worm, originally believed to be just a test with no victims, secretly armed 42 real GitHub repositories from 11 …
●●●
NVD
- CVE-2026-116100 – A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of …
- CVE-2026-116097 – A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an …
- CVE-2026-116098 – A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability …
- CVE-2026-116099 – A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to …
- CVE-2026-86973 – An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in …
EXPLOITS
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
- Synametrics Syncrify 6.2 – command execution
SECURELIST
- Deploying AI agents securely: how Kaspersky products mitigate AI threats
- How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asi
- Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
- Operation FlashHole: Lazarus breaks security, defies control
- The journey of a paper unicorn: adventures inside a modern warehouse