-
AI systems are fully capable of carrying out nightmare attacks against infrastructure and nobody’s ready
Autonomous AI systems are fully capable of carrying out a nightmare cyberattack scenario – finding and attacking critical operational …
-
Week in review: FortiBleed is still active, Patch Tuesday forecast
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Three questions a hospital CISO …
-
Fresh Eyes on Old Code: AI and Open Source Security
Open source speeds up application development — but is it making our software insecure? …
-
‘You have a meeting’: the calendar phishing scam growing exponentially
ou’re preparing for the week ahead and take a look at your Google calendar. There’s an entry for a meeting that you must have …
-
CVE-2026-108768 – A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue …
A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of the component …
-
CVE-2026-59508 – Improper neutralization of special elements used in an SQL command (‘SQL injection’) …
Improper neutralization of special elements used in an SQL command (‘SQL injection’) vulnerability in Interuse i-Bos. This issue affects …
-
CVE-2026-19935 – The Bluetooth LE host queues received L2CAP connection-oriented channel (CoC) data for …
The Bluetooth LE host queues received L2CAP connection-oriented channel (CoC) data for deferred processing through a struct k_work embedded …
-
CVE-2026-19740 – The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth …
The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receive node that carried …
-
CVE-2026-19739 – The Bluetooth Link Layer control procedure code in …
The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retains the received RX node while …
-
CVE-2026-19738 – The Bluetooth Link Layer Control Procedure (LLCP) implementation for Connected …
The Bluetooth Link Layer Control Procedure (LLCP) implementation for Connected Isochronous Stream (CIS) creation retains an RX node …
-
CVE-2026-19737 – i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction …
i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DIR_RX and I2S_DIR_TX …
-
CVE-2026-19736 – The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the …
The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller’s byte count straight to the vendor SDK routine …
●●●
NVD
- CVE-2026-108691 – mall4j through 4.0 contains an improper authorization vulnerability that allows …
- CVE-2026-108688 – Eladmin through 2.7 contains a missing authorization vulnerability in the …
- CVE-2026-108689 – Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows …
- CVE-2026-108690 – mall4j through 4.0 contains an information disclosure vulnerability that allows …
- CVE-2026-108768 – A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies