-
Vizio, Samsung smart TVs seem to ignore tracking opt outs
If you thought that opting out of surveillance on your smart TV would give you your privacy back, think again. A study by researchers at …
-
Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441)
Zyxel GS1900 series network switches that received a fix for a flaw that was later reported to have been exploited in the wild are still …
-
New York’s Queens Public Library battles ransomware crims: Wi-Fi, checkouts, and website go dark
New York City’s Queens Public Library (QPL) is battling a ransomware attack, it confirmed on Wednesday evening via social media and to …
-
Beyond Cold Storage: Why Hardware Wallets Need Open Source and Clear Signing
For years, hardware wallets have been treated as the gold standard for protecting cryptocurrency. By keeping private keys off …
-
Chinese Nation-State Threat Activity Falls Sharply in Q2 and Q3 2026
Chinese nation-state threat activity declined by 41.4% in the six months from April to September 2026, according to a new study by Trellix. …
-
Scammers capitalize on GTA 6 hype to push malware and crypto cons
Scammers are offering supposed leaked builds, early copies and phone versions of Grand Theft Auto VI (GTA 6) weeks before the game’s …
-
Google puts new limits on AI agents that hunt threats and fix vulnerabilities
Google Cloud is adding new controls to CodeMender, its AI tool for finding and fixing software vulnerabilities, allowing businesses to …
-
Fake ChatGPT and Claude Apps Use Signed Executables to Install Yoba Malware
Fake ChatGPT and Claude apps spread Yoba malware through GitHub, using signed executables to load a cryptominer on Windows PCs and support …
-
Norway’s aid agency pwned and all users’ data is stolen
Norway’s national aid agency, Norad, has confirmed that cyber criminals broke into its systems, stealing information about each and every …
-
Presentation: Zero Trust Agent Systems that Pass Audits and Still Ship
Advait Patel shares a playbook for securing AI agent systems in production. He discusses moving defense boundaries from the prompt to the …
-
5 Active Cyber Threats That Put US Enterprises at Risk in October 2026
October 2026 brought another wave of cyber threats targeting US businesses, with attackers exploiting trusted platforms, legitimate …
-
GhostMap Bug Leaves Android Phones Stuck in Reboot Loop
Security experts have warned of a new vulnerability in Android smartphones which could plunge devices into a crash loop that can only be …
●●●
NVD
- CVE-2026-109849 – Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is …
- CVE-2026-122049 – A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function …
- CVE-2026-122050 – A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit …
- CVE-2026-122051 – A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an …
- CVE-2026-123036 – A flaw was found in ansible-core. When a task marked `no_log: true` fails, the task …
EXPLOITS
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
- Synametrics Syncrify 6.2 – command execution
SECURELIST
- The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603
- MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT dev
- CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
- Filter generation in practice: from algorithms to LLMs
- Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia