-
Podcast: Future Cybersecurity: Hardware Memory Safety, Automated Governance and Post-Quantum Cryptography
In this episode, Chris Swan, engineer at Atsign and security track host at QCon London, reflects on the ideas shared during QCon London …
-
Star Blizzard Targets 100+ Organizations with Phishing and RedFlick Technique
Russian group Star Blizzard expands phishing campaigns with a new malware delivery RedFlick technique, using scheduled tasks to deliver the …
-
Google Suspends Open-Source Bug Bounty Due to AI Vulnerability Reports
Google has suspended its open-source bug bounty program until 2027 in an effort to stem the flood of AI submissions. In a statement posted …
-
Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)
Microsoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity vulnerability (CVE-2026-96940) that …
-
MAKERphone 2: A DIY 4G phone with plug-in camera, speaker and prototyping board
CircuitMess, a Croatian electronics kit maker, is selling MAKERphone 2.0, a build-it-yourself 4G phone on Kickstarter that buyers program …
-
More UK Schools Are Recovering Faster from Cyber Incidents
UK schools are getting better at incident recovery, although major gaps in cybersecurity capability still exist across the sector, …
-
Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The …
-
Cloudflare Fixes Cross-Tenant Data Exposure in Containers
Cloudflare recently disclosed a cross-tenant data exposure vulnerability in Containers, the platform that also underpins Cloudflare …
-
Frontline Education Breach Impacts K-12 School District Staff
A third-party breach at a popular software provider in the US education sector has enabled cybercriminals to make off with Social Security …
-
The State of Ransomware: September 2026
1. Oceanside Unified School District in California suffered a suspected cyberattack that disrupted critical network services, leaving staff …
-
Google pauses open-source bug bounty program over invalid AI reports
Google has paused its open-source software bug bounty program, citing a “significant rise” in automated AI-related submissions, most of …
-
Machine-speed security: A Computer Weekly Downtime Upload podcast
Why have I been blocked? This website is using a security service to protect itself from online …
●●●
NVD
- CVE-2026-105169 – A security flaw has been discovered in kishor-23 food-waste-management-system …
- CVE-2026-105254 – A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is …
- CVE-2026-105170 – A weakness has been identified in kishor-23 food-waste-management-system …
- CVE-2026-105168 – A vulnerability was identified in kishor-23 food-waste-management-system …
- CVE-2026-105171 – A security vulnerability has been detected in kishor-23 food-waste-management-system …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies