-
Cloudflare Fixes Cross-Tenant Data Exposure in Containers
Cloudflare recently disclosed a cross-tenant data exposure vulnerability in Containers, the platform that also underpins Cloudflare …
-
Frontline Education Breach Impacts K-12 School District Staff
A third-party breach at a popular software provider in the US education sector has enabled cybercriminals to make off with Social Security …
-
The State of Ransomware: September 2026
1. Oceanside Unified School District in California suffered a suspected cyberattack that disrupted critical network services, leaving staff …
-
Google pauses open-source bug bounty program over invalid AI reports
Google has paused its open-source software bug bounty program, citing a “significant rise” in automated AI-related submissions, most of …
-
Machine-speed security: A Computer Weekly Downtime Upload podcast
Why have I been blocked? This website is using a security service to protect itself from online …
-
New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been …
-
doxx.net opens Agentic Defined Networking public beta, raises $38 million
doxx.net has launched the open beta of its Agentic Defined Networking (ADN) platform, which lets people and their agents create their own …
-
Apple tightens macOS disk access as AI agents become more powerful
Apple plans to introduce additional controls for Full Disk Access in macOS, citing growing privacy risks as AI agents become more capable …
-
AI slop submissions force Google to freeze its open-source bug bounty
Google has stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP), …
-
Three questions a hospital CISO should ask a healthcare fintech vendor
In this Help Net Security video, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled …
-
Keyorix: Open-source secrets management for teams that can’t use SaaS
Keyorix is an open-source secrets manager that runs entirely on a company’s own servers. A secrets manager is the locked store where an …
-
Cloudflare Plans Public Certificate Authority to Issue Quantum-Safe TLS Certificates
Cloudflare announced plans to operate a free public Certificate Authority designed to issue quantum-safe Transport Layer Security …
●●●
NVD
- CVE-2026-105169 – A security flaw has been discovered in kishor-23 food-waste-management-system …
- CVE-2026-105314 – Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal …
- CVE-2026-105170 – A weakness has been identified in kishor-23 food-waste-management-system …
- CVE-2026-105168 – A vulnerability was identified in kishor-23 food-waste-management-system …
- CVE-2026-105171 – A security vulnerability has been detected in kishor-23 food-waste-management-system …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies