|
Article: Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data - published 6 days ago. Content: https://thehackernews.com/2026/10/chainalysis-confirms-intrusion-into.html Published: 2026 10 31 12:01:56 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims - published 6 days ago. Content: https://www.wired.com/story/kernel-panic-volta-autodoxer-ai-infostealer-malware/ Published: 2026 10 31 12:00:00 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: Quickpost: WT20 Welding Electrodes & Radiation - published 6 days ago. Content: I found another material that I can buy freely and test with my Radiacode 103 radiation detector: WT20 Welding Electrodes. These are tungsten welding electrodes with 2% thorium. Thorium is a little bit radioactive and shows up in the spectrum that I measured over a period of 3 hours with a Radiacode 103 device: Quickpost info ... https://blog.didierstevens.com/2026/10/31/quickpost-wt20-welding-electrodes-radiation/ Published: 2026 10 31 11:31:22 Received: 2026 11 05 17:15:10 Feed: Didier Stevens Source: Didier Stevens Category: Cyber Security Topic: Cyber Security |
|
Article: Wireshark 5.0.0rc1 Release, (Sat, Oct 31st) - published 6 days ago. Content: Wireshark Release Candidate 5.0.0 was published: soon we can expect a new major version of Wireshark. https://isc.sans.edu/diary/rss/33476 Published: 2026 10 31 10:52:53 Received: 2026 11 05 17:12:31 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: YARA-X 1.22.1 Release, (Sat, Oct 31st) - published 6 days ago. Content: YARA-X's 1.22.1 is a bugfix version, it brings 2 bugfixes. https://isc.sans.edu/diary/rss/33474 Published: 2026 10 31 10:48:17 Received: 2026 11 05 17:12:31 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access - published 7 days ago. Content: https://thehackernews.com/2026/10/attackers-chain-three-ivanti-connect.html Published: 2026 10 31 08:27:43 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats - published 7 days ago. Content: https://thehackernews.com/2026/10/a-shared-chatgpt-link-could-run.html Published: 2026 10 31 05:33:41 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38% - published 7 days ago. Content: https://thehackernews.com/2026/10/cloudflare-reports-182-million-network.html Published: 2026 10 31 04:56:12 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Quickpost: Ghost USB-C - published 7 days ago. Content: You’ve probably encountered devices that are powered via a USB-C connector, but that don’t work when you connect them to a USB-C charger or powerbank. They only work with a USB-A to USB-C cable, not with a USB-C to USB-C cable. I used to encounter such devices regularly a couple of years ago, but far less nowadays. Until we went on holiday this summer, a... https://blog.didierstevens.com/2026/10/31/quickpost-ghost-usb-c/ Published: 2026 10 31 00:00:00 Received: 2026 11 05 17:15:10 Feed: Didier Stevens Source: Didier Stevens Category: Cyber Security Topic: Cyber Security |
|
Article: Rewriting Copyright Law for Generative AI Would Hurt Everyone - published 7 days ago. Content: https://www.eff.org/deeplinks/2026/10/rewriting-copyright-law-generative-ai-would-hurt-everyone Published: 2026 10 30 23:42:45 Received: 2026 11 05 17:19:26 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: My Fugly TV - published 7 days ago. Content: Innovation is great, things get better, smarter, sleeker, cleaner, and overall improve your experience until they don’t. When I was a young lad, we had a TV (a colour one mind you, before you make some jokes about my age which is increasingly becoming a sensitive topic for me), but it had big ugly chunky buttons on it. I’m sure some hipster will say it’... https://javvadmalik.com/2026/10/30/my-fugly-tv/ Published: 2026 10 30 23:05:53 Received: 2026 11 05 17:15:38 Feed: J4vv4D Source: J4vv4D Category: Cyber Security Topic: Cyber Security |
|
|
Article: Oracle Security Alert for CVE-2026-114820
- published 7 days ago. Content: https://www.oracle.com/security-alerts/alert-cve-2026-114820.html Published: 2026 10 30 23:00:00 Received: 2026 11 05 17:13:59 Feed: Oracle Security Alerts Source: Oracle Security Alerts Category: Alerts Topic: Vulnerabilities |
|
Article: Friday Squid Blogging: Bigfin Squid Off California Coast - published 7 days ago. Content: Neat video: The sighting, announced September 2, marks the first time anyone has spotted a live bigfin squid, which belongs to the Magnapinna genus, in the northeastern Pacific Ocean. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy. ... https://www.schneier.com/blog/archives/2026/10/friday-squid-blogging-bigfin-squid-off-california-coast.html Published: 2026 10 30 21:04:36 Received: 2026 11 05 17:18:10 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Why VPNs Are Worth Defending - published 7 days ago. Content: https://www.eff.org/deeplinks/2026/10/why-vpns-are-worth-defending Published: 2026 10 30 20:55:24 Received: 2026 11 05 17:19:26 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices - published 7 days ago. Content: https://www.wired.com/story/trojan-malware-targets-thousands-of-anthropic-claude-developer-systems/ Published: 2026 10 30 20:38:46 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
Article: Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see - published 7 days ago. Content: A n0n ransomware operator tried to break into 23 organizations across 14 countries, but couldn't secure its own front door, leaving its server exposed with all of its methods on view. The criminals used a mix of new (AI) and old (stolen credentials) tooling during their data-theft spree, and in some cases not only stole and encrypted files, but also deleted... https://www.theregister.com/security/2026/10/30/crim-spent-7k-on-ai-services-in-extortion-attacks-then-left-evidence-for-all-to-see/5306754 Published: 2026 10 30 19:37:12 Received: 2026 11 05 17:19:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Vulnerabilities in PHP Affecting Cisco Products: October 2026 - published 7 days ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Vulnerabilities%20in%20PHP%20Affecting%20Cisco%20Products:%20%20October%202026%26vs_k=1 Published: 2026 10 30 19:24:31 Received: 2026 11 05 17:12:49 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
Article: North Korea May Be Behind the $6.3B Binance Hack - published 7 days ago. Content: Security expert insight on the $6.3 billion cryptocurrency heist. https://www.securitymagazine.com/articles/102719-north-korea-may-be-behind-the-63b-binance-hack Published: 2026 10 30 18:32:00 Received: 2026 11 05 17:01:49 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
|
Article: Train for the Gray Zone: Security Awareness Needs a Simulator - published 7 days ago. Content: Policies tell employees what the rules are. Scenarios and near misses teach them what the rules are for. https://www.securitymagazine.com/articles/102707-train-for-the-gray-zone-security-awareness-needs-a-simulator Published: 2026 10 30 17:00:00 Received: 2026 11 05 17:01:49 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
Article: Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide - published 7 days ago. Content: https://thehackernews.com/2026/10/chinese-hackers-use-ai-powered-artex-to.html Published: 2026 10 30 16:58:44 Received: 2026 11 05 17:16:36 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: GM cracks the petty cash box for multistate driver tracking settlement - published 7 days ago. Content: General Motors is taking what looks like a light slap on the wrist from a coalition of 35 states and the District of Columbia after agreeing to settle allegations that it collected drivers' data without proper consent and sold it to data brokers that supplied insurance companies. The Washington state AG's office said on Thursday that GM had reached a $220 m... https://www.theregister.com/security/2026/10/30/gm-cracks-the-petty-cash-box-for-multistate-driver-tracking-settlement/5306721 Published: 2026 10 30 16:48:37 Received: 2026 11 05 17:19:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Anthropic: That Claude Code extension compromise… couldn't be us - published 7 days ago. Content: Anthropic has denied allegations that a malicious version of the official Claude Code extension published to Cursor’s marketplace was linked to any kind of compromise of its own systems. The company was forced to issue a statement after prominent figures in the cybersecurity industry alleged that the extension, which infected up to 5,000 developers, was upl... https://www.theregister.com/cyber-crime/2026/10/30/anthropic-that-claude-code-extension-compromise-couldnt-be-us/5306682 Published: 2026 10 30 16:27:00 Received: 2026 11 05 17:19:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Bloatware in Aftermarket Auto Parts - published 7 days ago. Content: This story is interesting: One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing about. Among the pre-installed bloatware—or spyware, if you’re being less charitable—was a voice assistant equipped wi... https://www.schneier.com/blog/archives/2026/10/bloatware-in-aftermarket-auto-parts.html Published: 2026 10 30 15:20:02 Received: 2026 11 05 17:18:10 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: 6 Cyber Experts Share Their Greatest Security Scares - published 7 days ago. Content: “The instincts I built 25 years ago no longer apply,” says Randolph Barr, Chief Information Security Officer at Cequence Security. Six cybersecurity experts share what scares them most about the current landscape. https://www.securitymagazine.com/articles/102702-6-cyber-experts-share-their-greatest-security-scares Published: 2026 10 30 14:00:00 Received: 2026 11 05 17:01:50 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
|
Article: “A Ring Tone That I Cannot Hear” – Twenty Years Later - published 7 days ago. Content: My first post for this blog was in June 2006, 20 years ago: A Ring Tone That I Cannot Hear. Back then, I tested my hearing with Audacity, and I could hear a tone up to 14 kHz. 20 years later, I do the test again, and I can hear a tone up to 8 kHz. It’s no surprise that my hearing declined over the years, that happens to everybody. What did surpr... https://blog.didierstevens.com/2026/10/30/a-ring-tone-that-i-cannot-hear-twenty-years-later/ Published: 2026 10 30 13:50:46 Received: 2026 11 05 17:15:10 Feed: Didier Stevens Source: Didier Stevens Category: Cyber Security Topic: Cyber Security |
|
|
Article: Supermicro BMC ipmi cves - published 7 days ago. Content: submitted by /u/Alfrede81 [link] [comments] https://www.reddit.com/r/netsec/comments/1xjeg2c/supermicro_bmc_ipmi_cves/ Published: 2026 10 30 12:47:51 Received: 2026 11 05 17:18:09 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: CISA Adds Two Known Exploited Vulnerabilities to Catalog - published 7 days ago. Content: https://www.cisa.gov/news-events/alerts/2026/10/30/cisa-adds-two-known-exploited-vulnerabilities-catalog Published: 2026 10 30 12:00:00 Received: 2026 11 05 22:24:06 Feed: CISA Current Activity Source: Cybersecurity and Infrastructure Security Agency (CISA) Category: News Topic: Cyber Security |
|
Article: British intelligence agency misplaced 'thousands' of storage devices, years later still can't say how many - published 7 days ago. Content: Thousands of GCHQ storage drives containing sensitive data have been lost for years, and the British signals intelligence agency still cannot explain where they are. According to the Investigatory Powers Commissioner’s Office’s (IPCO) annual report, the missing storage drives have been known to officials for years, and may contain data related to the Invest... https://www.theregister.com/security/2026/10/30/british-intelligence-agency-misplaced-thousands-of-storage-devices-years-later-still-cant-say-how-many/5306605 Published: 2026 10 30 11:45:00 Received: 2026 11 05 17:19:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: The $6.3 Billion Binance Hack Was Pulled Off in Just 20 Minutes - published 7 days ago. Content: https://www.wired.com/story/the-dollar63-billion-binance-hack-was-pulled-off-in-just-20-minutes/ Published: 2026 10 30 11:36:52 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
Article: Hackers leak personnel data of 41,000+ Homeland Security staff, including ICE and border agents - published 7 days ago. Content: https://www.bitdefender.com/en-us/blog/hotforsecurity/hackers-leak-41-000-dhs-staff-data Published: 2026 10 30 10:33:50 Received: 2026 11 05 17:15:27 Feed: Graham Cluley Source: Graham Cluley Category: Cyber Security Topic: Cyber Security |
|
|
Article: Hackers Post Data On US Immigration Agents - published 8 days ago. Content: https://www.silicon.co.uk/cybersecurity/hack-dhs-ice-632106 Published: 2026 10 30 08:00:42 Received: 2026 11 05 17:01:05 Feed: Silicon UK – Security Source: Silicon UK Category: News Topic: Cyber Security |
|
|
Article: Is “Autonomous” an Overused Word in Security AI? - published 8 days ago. Content: Is “autonomous” an overused word in security AI? Bobby Filar, Head of AI at Sublime Security, shares with Security magazine how the word “autonomous” is being used in the industry and how he views the term. ... https://www.securitymagazine.com/articles/102700-is-autonomous-s-an-overused-word-in-security-ai Published: 2026 10 30 05:00:00 Received: 2026 11 05 17:01:50 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
Article: In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security - published 8 days ago. Content: Crypto exchange Binance has paused trading after discovering unknown parties cracked one of its workers’ laptops and used it to make massive trades. Late on Thursday, US time, the company used its social media feeds to report “Our teams are aware of reports of a potential security issue and are actively investigating.” The exchange insisted “User funds are ... https://www.theregister.com/security/2026/10/30/in-the-year-ai-re-wrote-the-infosec-rulebook-its-comforting-to-know-crypto-exchanges-still-have-bad-security/5306539 Published: 2026 10 30 04:22:12 Received: 2026 11 05 17:19:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: php2bitcoin x brotli2coin: live hacking stream - published 8 days ago. Content: I wanted to figure out just how exploitable php2shell and http2shell were in practice, so I've created two purposely vulnerable web apps: https://brotli2bitcoin.com & https://php2bitcoin.com with a standard production config -- pop an RCE and find the flag to claim the $1K BTC. And to make it interesting, I setup a live stream showing every single attack... https://www.reddit.com/r/netsec/comments/1xj4co1/php2bitcoin_x_brotli2coin_live_hacking_stream/ Published: 2026 10 30 03:06:20 Received: 2026 11 06 08:58:52 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched - published 8 days ago. Content: Multiple vulnerabilities in five popular AI developer tools could allow attackers to execute code on a host machine, read and steal files, or spoof browser address bars. Researchers say flaws in OpenAI's Codex and Microsoft's VS Code remain unpatched, potentially putting developers who use affected configurations at risk. AI security startup Forever Securit... https://www.theregister.com/security/2026/10/29/researchers-find-bugs-in-5-ai-developer-tools-with-openai-and-microsoft-flaws-still-unpatched/5306508 Published: 2026 10 29 23:12:26 Received: 2026 11 05 17:19:17 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Cisco Finesse Server-Side Request Forgery Vulnerability - published 8 days ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-ssrf-mmSuyugS?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Finesse%20Server-Side%20Request%20Forgery%20Vulnerability%26vs_k=1 Published: 2026 10 29 21:22:28 Received: 2026 11 05 17:12:49 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
Article: Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers - published 8 days ago. Content: Suspected Chinese attackers chained PHP2Shell with a Linux kernel privilege-escalation exploit to root 25 servers, including Palo Alto Networks firewalls linked to US government-affiliated organizations, according to Dream researchers. The snoops began exploiting these servers on October 23, targeting organizations across the US, Japan, Taiwan, and South Ko... https://www.theregister.com/security/2026/10/29/suspected-chinese-attackers-built-a-custom-php2shell-exploit-and-rooted-25-servers/5306456 Published: 2026 10 29 19:05:17 Received: 2026 11 05 17:19:17 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center - published 8 days ago. Content: https://www.fortra.com/blog/byod-cyberattack-diverts-ambulances-and-cancels-classes-university-new-mexico-health-center Published: 2026 10 29 17:01:24 Received: 2026 11 05 17:15:27 Feed: Graham Cluley Source: Graham Cluley Category: Cyber Security Topic: Cyber Security |
|
Article: Tech Tips for Parents this Digital Parenting Week - published 8 days ago. Content: https://www.eff.org/deeplinks/2026/10/tech-tips-parents-digital-parenting-week Published: 2026 10 29 17:00:05 Received: 2026 11 05 17:19:26 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: Belgium's tax agency confirms cyberattack, pulls services offline - published 8 days ago. Content: Belgium's finance and tax agency has pulled "several" digital services offline after a cyberattack on the organization. FOD Financiën confirmed the attack on Wednesday, saying that MyMinfin, the agency's main online tax portal, as well as other online services, are temporarily unavailable while they start the initial investigations. "This measure helps limi... https://www.theregister.com/security/2026/10/29/belgiums-tax-agency-confirms-cyberattack-pulls-services-offline/5306409 Published: 2026 10 29 14:47:40 Received: 2026 11 05 17:19:17 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: EMBRACE: How We Hacked the Browsers Embedded in Top Five Desktop AI Assistants · Forever Secur - published 8 days ago. Content: submitted by /u/Content-Winter5328 [link] [comments]... https://www.reddit.com/r/netsec/comments/1xilm92/embrace_how_we_hacked_the_browsers_embedded_in/ Published: 2026 10 29 14:31:39 Received: 2026 11 05 17:18:09 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: TightVNC Viewer Pre-auth RCE - published 8 days ago. Content: What if a VNC server could make your viewer believe it had a ~4 GB framebuffer… while actually allocating only 128 KB? That’s the core of this TightVNC vulnerability. A malicious server can announce a crafted 32768 × 32769 screen at 32bpp, causing the framebuffer size calculation to overflow. The allocation wraps down to 128 KB, but the viewer continues usin... https://www.reddit.com/r/netsec/comments/1xil17j/tightvnc_viewer_preauth_rce/ Published: 2026 10 29 14:09:08 Received: 2026 11 05 17:18:09 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: TeamViewer RCE Vulnerability (CVE-2026-11585) - published 8 days ago. Content: submitted by /u/NewResearch1337 [link] [comments]... https://www.reddit.com/r/netsec/comments/1xikzuw/teamviewer_rce_vulnerability_cve202611585/ Published: 2026 10 29 14:07:38 Received: 2026 11 05 17:18:09 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: 42M Records Exposed by Government Technology Platform - published 8 days ago. Content: 42 million documents, many containing personally identifiable information (PII) in plaintext, were leaked. https://www.securitymagazine.com/articles/102708-42m-records-exposed-by-government-technology-platform Published: 2026 10 29 13:15:00 Received: 2026 11 05 17:01:50 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
|
Article: Shortlist of age checks for the UK's under-16 social media ban is out, 'some' adults will need verifying - published 8 days ago. Content: The UK’s comms watchdog has put forward four methods of checking netizens aren't kids – dubbed highly effective age assurance (HEAA) – as it prepares for the proposed under-16 social media ban. The regulator says some adults may not need to prove their over-16-ness to social media platforms that will make inferences about their age based on previous activit... https://www.theregister.com/security/2026/10/29/shortlist-of-age-checks-for-the-uks-under-16-social-media-ban-is-out-some-adults-will-need-verifying/5306282 Published: 2026 10 29 12:33:00 Received: 2026 11 05 17:19:17 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: CISA Adds Two Known Exploited Vulnerabilities to Catalog - published 8 days ago. Content: https://www.cisa.gov/news-events/alerts/2026/10/29/cisa-adds-two-known-exploited-vulnerabilities-catalog Published: 2026 10 29 12:00:00 Received: 2026 11 05 22:24:06 Feed: CISA Current Activity Source: Cybersecurity and Infrastructure Security Agency (CISA) Category: News Topic: Cyber Security |
|
|
Article: Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour - published 8 days ago. Content: EXCLUSIVE Researchers identified at least 83 attacks against 61 public GitHub repositories, including popular open source projects such as Google LangExtract, Trivy, Brave browser, and MLflow, in what they suspect is a coordinated campaign to execute commands in CI/CD environments and steal credentials and access tokens. It all happened very quickly, the Ra... https://www.theregister.com/security/2026/10/29/attackers-turn-github-issues-into-supply-chain-campaign-against-61-public-repos-in-less-than-an-hour/5306153 Published: 2026 10 29 12:00:00 Received: 2026 11 05 17:19:17 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Your Ring Doorbell Could Miss Trick-or-Treaters — Check These Settings Before Halloween - published 8 days ago. Content: https://www.techrepublic.com/article/news-ring-doorbell-motion-zones-halloween/ Published: 2026 10 29 11:31:13 Received: 2026 11 05 17:19:12 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
|
Article: A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards - published 8 days ago. Content: https://www.wired.com/story/a-hacker-targeted-high-stakes-poker-players-with-malware-that-exposed-their-cards/ Published: 2026 10 29 10:30:00 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
Article: Session security, token protection, continuous access evaluation, and measuring what users ACTUALLY sign in with - published 8 days ago. Content: https://www.darkoperator.com/blog/2026/10/29/w5qsv4977w92qgoxoethi861dzud1l Published: 2026 10 29 10:00:00 Received: 2026 11 05 17:16:55 Feed: Blog Source: Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: The Last Proof of Human Craft: Forging a Microsoft Edge Full Chain with Logic Bugs Only! - published 8 days ago. Content: submitted by /u/albinowax [link] [comments]... https://www.reddit.com/r/netsec/comments/1xif160/the_last_proof_of_human_craft_forging_a_microsoft/ Published: 2026 10 29 09:15:54 Received: 2026 11 06 08:58:52 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: Admin dropped the F-bomb in a password to show hackers who was really 1337 - published 8 days ago. Content: Welcome back to PWNED, in which The Reg offers cautionary tales from folks who’ve left their doors wide open to attackers and lived to tell the tale. This week’s misadventure involves unpatched older machines and a password that was supposed to send a message to crims. Our story comes courtesy once again of leading red teamer and pen tester Dahvid Schloss o... https://www.theregister.com/security/2026/10/29/admin-dropped-the-f-bomb-in-a-password-to-show-hackers-who-was-really-1337/5306139 Published: 2026 10 29 09:00:00 Received: 2026 11 05 17:19:17 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Axis Camera Station Deep-Dive: Unauth RCE to Decrypting Every Camera Credential (CVE-2025-30026/30023 + CVE-2026-63286) - published 9 days ago. Content: submitted by /u/Rare_Bicycle_5705 [link] [comments] https://www.reddit.com/r/netsec/comments/1xiekai/axis_camera_station_deepdive_unauth_rce_to/ Published: 2026 10 29 08:45:46 Received: 2026 11 05 17:18:09 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: [0day-rubbish] NETGEAR RAX120 V1.2.5.18 authenticated SOAP InstallApp OS command injection to root-configured web-stack execution (6.8 Medium; conditionally 7.2 High with management exposure) - published 9 days ago. Content: https://seclists.org/fulldisclosure/2026/Oct/57 Published: 2026 10 29 04:12:45 Received: 2026 11 05 17:12:35 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
Article: [0day-rubbish] Raritan PX3 PDU G4 firmware 4.3.14 command injection in the ping and traceroute diagnostics through an inverted hostname-validation return check (8.8) - published 9 days ago. Content: https://seclists.org/fulldisclosure/2026/Oct/54 Published: 2026 10 29 04:12:44 Received: 2026 11 05 17:12:35 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: Bluesky Is Blocking Links to a Major Leak of DHS Employee Records - published 9 days ago. Content: https://www.wired.com/story/bluesky-blocks-links-to-major-leak-of-dhs-data/ Published: 2026 10 29 03:34:46 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: XML Signature Wrapping authentication bypass in Moldova's MPass SAML NuGet library, fixed in 10.0.4 (CVE requested, CAN-2026-2041077) - published 9 days ago. Content: Egov.Integrations.MPass.Saml, the ASP.NET Core handler that relying parties use to verify MPass SAML 2.0 responses, verified signatures like this in every version before 10.0.4: signedXml.LoadXml(signatureElement); return signedXml.CheckSignature(publicCertificate, verifySignatureOnly: true); CheckSignature confirms that the references in SignedInfo are va... https://www.reddit.com/r/netsec/comments/1xi65vs/xml_signature_wrapping_authentication_bypass_in/ Published: 2026 10 29 01:00:22 Received: 2026 11 06 08:58:52 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
Click to Open Code Editor