-
Three questions a hospital CISO should ask a healthcare fintech vendor
In this Help Net Security video, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled …
-
Keyorix: Open-source secrets management for teams that can’t use SaaS
Keyorix is an open-source secrets manager that runs entirely on a company’s own servers. A secrets manager is the locked store where an …
-
Cloudflare Plans Public Certificate Authority to Issue Quantum-Safe TLS Certificates
Cloudflare announced plans to operate a free public Certificate Authority designed to issue quantum-safe Transport Layer Security …
-
How RMM abuse gives attackers a way in that looks like business as usual
Huntress found attackers using legitimate remote monitoring and management (RMM) software in 45% of the endpoint-related incidents it …
-
CVE-2026-84169 – The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a …
The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the …
-
CVE-2026-78371 – The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that …
The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that the person requesting a customer-uploaded file is …
-
CVE-2026-13607 – The File Uploads Addon for WooCommerce WordPress plugin through 1.7.6 stores …
The File Uploads Addon for WooCommerce WordPress plugin through 1.7.6 stores customer-uploaded files in a publicly web-accessible uploads …
-
CVE-2026-105306 – A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and …
A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server. The issue occurs because …
-
CVE-2026-105302 – A flaw was found in the User Session Note mapper of the Keycloak identity and access …
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the …
-
CVE-2026-105301 – A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution …
A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs …
-
CVE-2026-105237 – A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown …
A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file …
-
CVE-2026-105233 – A vulnerability has been found in kishor-23 food-waste-management-system …
A vulnerability has been found in kishor-23 food-waste-management-system …
●●●
NVD
- CVE-2026-105169 – A security flaw has been discovered in kishor-23 food-waste-management-system …
- CVE-2026-84169 – The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a …
- CVE-2026-105170 – A weakness has been identified in kishor-23 food-waste-management-system …
- CVE-2026-105168 – A vulnerability was identified in kishor-23 food-waste-management-system …
- CVE-2026-105171 – A security vulnerability has been detected in kishor-23 food-waste-management-system …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies