-
Encryption Is Getting Squeezed From All Sides
Canada’s planned surveillance law is the latest grim step in a series of threats to encryption that are spreading around the …
-
The power of AI is worrying senior Labour figures – as is the fear of ‘falling behind the public’
“I have this sense that, within a few months, AI is going to be all anyone is talking about,” said one cabinet minister, with an …
-
MALFEX npm Package ‘imgdecode’ Hides Shellcode Loader in Windows Native Addon
Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign …
-
Cybercrims go beyond stealing data to attack physical building systems
Late Sunday night, a still-unknown cybercriminal or group hacked thousands of remote-controlled refrigeration systems across hundreds of …
-
Fake Linda and me: the Agatha Christie-worthy mystery of the fraudster who stole my byline
t started with an entirely ordinary interaction on LinkedIn. Someone had tagged me in a post, saying how much they’d enjoyed contributing …
-
Ministers must be honest about Russian threat to UK, says former Foreign Office head
Ministers need to be honest with the British public about the immediate threat posed by Russia, which could soon lead to lives being lost, …
-
Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised …
-
The AI & SaaS Data Protection Gap: Why Fast-Growing Asia Pacific Businesses Are More Exposed Than They Realize
Midmarket organizations across Asia Pacific are rapidly adopting software as a service (SaaS) and AI-powered …
-
Not cool: who hacked France’s supermarket fridges?
Shortly before midnight last Sunday, the digital thermostats controlling hundreds of supermarket cold aisles across France began to flicker …
-
CVE-2026-111934 – Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress …
Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware that trusts the leftmost, client-supplied …
-
CVE-2026-111933 – Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before …
Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration vulnerability …
-
CVE-2026-111932 – Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before …
Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a stored HTML injection vulnerability …
●●●
NVD
- CVE-2026-111934 – Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress …
- CVE-2026-111854 – An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal …
- CVE-2026-111855 – An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal …
- CVE-2026-111853 – An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command …
- CVE-2026-111823 – Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies