-
AI systems are fully capable of carrying out nightmare attacks against infrastructure and nobody’s ready
Autonomous AI systems are fully capable of carrying out a nightmare cyberattack scenario – finding and attacking critical operational …
-
Week in review: FortiBleed is still active, Patch Tuesday forecast
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Three questions a hospital CISO …
-
Fresh Eyes on Old Code: AI and Open Source Security
Open source speeds up application development — but is it making our software insecure? …
-
‘You have a meeting’: the calendar phishing scam growing exponentially
ou’re preparing for the week ahead and take a look at your Google calendar. There’s an entry for a meeting that you must have …
-
CVE-2026-108575 – A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function …
A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_managers/main.py of …
-
CVE-2026-108574 – A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the …
A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function ui_view_session_spend_logs of the file …
-
CVE-2026-108573 – A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by …
A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function …
-
CVE-2026-108572 – A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is …
A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate of the file …
-
CVE-2026-108571 – A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. This impacts the …
A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. This impacts the function kqjcmdModel::returnchuli of the file …
-
CVE-2026-108570 – A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects …
A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file …
-
CVE-2026-108569 – A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted …
A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file …
-
CVE-2026-108568 – A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is …
A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is the function validatePaypalOrder of the file …
●●●
NVD
- CVE-2026-108691 – mall4j through 4.0 contains an improper authorization vulnerability that allows …
- CVE-2026-108688 – Eladmin through 2.7 contains a missing authorization vulnerability in the …
- CVE-2026-108689 – Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows …
- CVE-2026-108690 – mall4j through 4.0 contains an information disclosure vulnerability that allows …
- CVE-2026-108575 – A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies