Article: Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched - published 8 days ago.
Content: Multiple vulnerabilities in five popular AI developer tools could allow attackers to execute code on a host machine, read and steal files, or spoof browser address bars. Researchers say flaws in OpenAI's Codex and Microsoft's VS Code remain unpatched, potentially putting developers who use affected configurations at risk. AI security startup Forever Securit...
Copy Link: https://www.theregister.com/security/2026/10/29/researchers-find-bugs-in-5-ai-developer-tools-with-openai-and-microsoft-flaws-still-unpatched/5306508   
Published: 2026 10 29 23:12:26
Received: 2026 11 05 17:19:17
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security

Article: Cisco Finesse Server-Side Request Forgery Vulnerability - published 8 days ago.
Content:
Copy Link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-ssrf-mmSuyugS?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Finesse%20Server-Side%20Request%20Forgery%20Vulnerability%26vs_k=1   
Published: 2026 10 29 21:22:28
Received: 2026 11 05 17:12:49
Feed: Cisco Security Advisory
Source: Cisco Security Advisory
Category: Alerts
Topic: Vulnerabilities

Cyber Tzar Free Score Certificate

Article: Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers - published 8 days ago.
Content: Suspected Chinese attackers chained PHP2Shell with a Linux kernel privilege-escalation exploit to root 25 servers, including Palo Alto Networks firewalls linked to US government-affiliated organizations, according to Dream researchers. The snoops began exploiting these servers on October 23, targeting organizations across the US, Japan, Taiwan, and South Ko...
Copy Link: https://www.theregister.com/security/2026/10/29/suspected-chinese-attackers-built-a-custom-php2shell-exploit-and-rooted-25-servers/5306456   
Published: 2026 10 29 19:05:17
Received: 2026 11 05 17:19:17
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security

Article: BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center - published 8 days ago.
Content:
Copy Link: https://www.fortra.com/blog/byod-cyberattack-diverts-ambulances-and-cancels-classes-university-new-mexico-health-center   
Published: 2026 10 29 17:01:24
Received: 2026 11 05 17:15:27
Feed: Graham Cluley
Source: Graham Cluley
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Score Summary

Article: Tech Tips for Parents this Digital Parenting Week - published 8 days ago.
Content:
Copy Link: https://www.eff.org/deeplinks/2026/10/tech-tips-parents-digital-parenting-week   
Published: 2026 10 29 17:00:05
Received: 2026 11 05 17:19:26
Feed: Deeplinks
Source: Deeplinks
Category: Cyber Security
Topic: Cyber Security

Article: Belgium's tax agency confirms cyberattack, pulls services offline - published 8 days ago.
Content: Belgium's finance and tax agency has pulled "several" digital services offline after a cyberattack on the organization. FOD Financiën confirmed the attack on Wednesday, saying that MyMinfin, the agency's main online tax portal, as well as other online services, are temporarily unavailable while they start the initial investigations. "This measure helps limi...
Copy Link: https://www.theregister.com/security/2026/10/29/belgiums-tax-agency-confirms-cyberattack-pulls-services-offline/5306409   
Published: 2026 10 29 14:47:40
Received: 2026 11 05 17:19:17
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Your Score Explained

Article: EMBRACE: How We Hacked the Browsers Embedded in Top Five Desktop AI Assistants · Forever Secur - published 8 days ago.
Content: submitted by /u/Content-Winter5328 [link] [comments]...
Copy Link: https://www.reddit.com/r/netsec/comments/1xilm92/embrace_how_we_hacked_the_browsers_embedded_in/   
Published: 2026 10 29 14:31:39
Received: 2026 11 05 17:18:09
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: TightVNC Viewer Pre-auth RCE - published 8 days ago.
Content: What if a VNC server could make your viewer believe it had a ~4 GB framebuffer… while actually allocating only 128 KB? That’s the core of this TightVNC vulnerability. A malicious server can announce a crafted 32768 × 32769 screen at 32bpp, causing the framebuffer size calculation to overflow. The allocation wraps down to 128 KB, but the viewer continues usin...
Copy Link: https://www.reddit.com/r/netsec/comments/1xil17j/tightvnc_viewer_preauth_rce/   
Published: 2026 10 29 14:09:08
Received: 2026 11 05 17:18:09
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: TeamViewer RCE Vulnerability (CVE-2026-11585) - published 8 days ago.
Content: submitted by /u/NewResearch1337 [link] [comments]...
Copy Link: https://www.reddit.com/r/netsec/comments/1xikzuw/teamviewer_rce_vulnerability_cve202611585/   
Published: 2026 10 29 14:07:38
Received: 2026 11 05 17:18:09
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Gold Score Certificate

Article: 42M Records Exposed by Government Technology Platform - published 8 days ago.
Content: 42 million documents, many containing personally identifiable information (PII) in plaintext, were leaked. 
Copy Link: https://www.securitymagazine.com/articles/102708-42m-records-exposed-by-government-technology-platform   
Published: 2026 10 29 13:15:00
Received: 2026 11 05 17:01:50
Feed: Security Magazine – All Feeds
Source: Security Magazine
Category: News
Topic: Security

Article: Shortlist of age checks for the UK's under-16 social media ban is out, 'some' adults will need verifying - published 8 days ago.
Content: The UK’s comms watchdog has put forward four methods of checking netizens aren't kids – dubbed highly effective age assurance (HEAA) – as it prepares for the proposed under-16 social media ban. The regulator says some adults may not need to prove their over-16-ness to social media platforms that will make inferences about their age based on previous activit...
Copy Link: https://www.theregister.com/security/2026/10/29/shortlist-of-age-checks-for-the-uks-under-16-social-media-ban-is-out-some-adults-will-need-verifying/5306282   
Published: 2026 10 29 12:33:00
Received: 2026 11 05 17:19:17
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Score Analysis

Article: CISA Adds Two Known Exploited Vulnerabilities to Catalog - published 8 days ago.
Content:
Copy Link: https://www.cisa.gov/news-events/alerts/2026/10/29/cisa-adds-two-known-exploited-vulnerabilities-catalog   
Published: 2026 10 29 12:00:00
Received: 2026 11 05 22:24:06
Feed: CISA Current Activity
Source: Cybersecurity and Infrastructure Security Agency (CISA)
Category: News
Topic: Cyber Security

Article: Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour - published 8 days ago.
Content: EXCLUSIVE Researchers identified at least 83 attacks against 61 public GitHub repositories, including popular open source projects such as Google LangExtract, Trivy, Brave browser, and MLflow, in what they suspect is a coordinated campaign to execute commands in CI/CD environments and steal credentials and access tokens. It all happened very quickly, the Ra...
Copy Link: https://www.theregister.com/security/2026/10/29/attackers-turn-github-issues-into-supply-chain-campaign-against-61-public-repos-in-less-than-an-hour/5306153   
Published: 2026 10 29 12:00:00
Received: 2026 11 05 17:19:17
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Risk Impact Distribution

Article: Your Ring Doorbell Could Miss Trick-or-Treaters — Check These Settings Before Halloween - published 8 days ago.
Content:
Copy Link: https://www.techrepublic.com/article/news-ring-doorbell-motion-zones-halloween/   
Published: 2026 10 29 11:31:13
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security

Article: A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards - published 8 days ago.
Content:
Copy Link: https://www.wired.com/story/a-hacker-targeted-high-stakes-poker-players-with-malware-that-exposed-their-cards/   
Published: 2026 10 29 10:30:00
Received: 2026 11 05 17:00:33
Feed: Wired.com – Security Feed
Source: Wired
Category: News
Topic: Cyber Security

Cyber Tzar Risk Impact Assesment

Article: Session security, token protection, continuous access evaluation, and measuring what users ACTUALLY sign in with - published 8 days ago.
Content:
Copy Link: https://www.darkoperator.com/blog/2026/10/29/w5qsv4977w92qgoxoethi861dzud1l   
Published: 2026 10 29 10:00:00
Received: 2026 11 05 17:16:55
Feed: Blog
Source: Blog
Category: Cyber Security
Topic: Cyber Security

Article: The Last Proof of Human Craft: Forging a Microsoft Edge Full Chain with Logic Bugs Only! - published 8 days ago.
Content: submitted by /u/albinowax [link] [comments]...
Copy Link: https://www.reddit.com/r/netsec/comments/1xif160/the_last_proof_of_human_craft_forging_a_microsoft/   
Published: 2026 10 29 09:15:54
Received: 2026 11 06 08:58:52
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: Admin dropped the F-bomb in a password to show hackers who was really 1337 - published 8 days ago.
Content: Welcome back to PWNED, in which The Reg offers cautionary tales from folks who’ve left their doors wide open to attackers and lived to tell the tale. This week’s misadventure involves unpatched older machines and a password that was supposed to send a message to crims. Our story comes courtesy once again of leading red teamer and pen tester Dahvid Schloss o...
Copy Link: https://www.theregister.com/security/2026/10/29/admin-dropped-the-f-bomb-in-a-password-to-show-hackers-who-was-really-1337/5306139   
Published: 2026 10 29 09:00:00
Received: 2026 11 05 17:19:17
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Your Score Explained

Article: Axis Camera Station Deep-Dive: Unauth RCE to Decrypting Every Camera Credential (CVE-2025-30026/30023 + CVE-2026-63286) - published 8 days ago.
Content: submitted by /u/Rare_Bicycle_5705 [link] [comments]
Copy Link: https://www.reddit.com/r/netsec/comments/1xiekai/axis_camera_station_deepdive_unauth_rce_to/   
Published: 2026 10 29 08:45:46
Received: 2026 11 05 17:18:09
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: [0day-rubbish] NETGEAR RAX120 V1.2.5.18 authenticated SOAP InstallApp OS command injection to root-configured web-stack execution (6.8 Medium; conditionally 7.2 High with management exposure) - published 8 days ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Oct/57   
Published: 2026 10 29 04:12:45
Received: 2026 11 05 17:12:35
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Cyber Tzar Risk Groups Explained

Article: [0day-rubbish] Raritan PX3 PDU G4 firmware 4.3.14 command injection in the ping and traceroute diagnostics through an inverted hostname-validation return check (8.8) - published 8 days ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Oct/54   
Published: 2026 10 29 04:12:44
Received: 2026 11 05 17:12:35
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: Bluesky Is Blocking Links to a Major Leak of DHS Employee Records - published 9 days ago.
Content:
Copy Link: https://www.wired.com/story/bluesky-blocks-links-to-major-leak-of-dhs-data/   
Published: 2026 10 29 03:34:46
Received: 2026 11 05 17:00:33
Feed: Wired.com – Security Feed
Source: Wired
Category: News
Topic: Cyber Security

Article: XML Signature Wrapping authentication bypass in Moldova's MPass SAML NuGet library, fixed in 10.0.4 (CVE requested, CAN-2026-2041077) - published 9 days ago.
Content: Egov.Integrations.MPass.Saml, the ASP.NET Core handler that relying parties use to verify MPass SAML 2.0 responses, verified signatures like this in every version before 10.0.4: signedXml.LoadXml(signatureElement); return signedXml.CheckSignature(publicCertificate, verifySignatureOnly: true); CheckSignature confirms that the references in SignedInfo are va...
Copy Link: https://www.reddit.com/r/netsec/comments/1xi65vs/xml_signature_wrapping_authentication_bypass_in/   
Published: 2026 10 29 01:00:22
Received: 2026 11 06 08:58:52
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Change Over Time (Extended)

Article: Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice - published 9 days ago.
Content:
Copy Link: https://grahamcluley.com/smashing-security-podcast-490/   
Published: 2026 10 29 00:16:56
Received: 2026 11 05 17:15:27
Feed: Graham Cluley
Source: Graham Cluley
Category: Cyber Security
Topic: Cyber Security