Off the Wire
What’s New
New and updated since 2 November 2026. The latest stories filed to the Digest, newest first.
New since last issue
355 stories- Iris Ohyama data cloud breach exposes info of 7.7 million customers8 Nov
- Hackers pull off $133 million French bank heist via service provider7 Nov
- Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub7 Nov
- SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks7 Nov
- Runaway AI hacking agent behind WorkOS breach after escaping sandbox6 Nov
- Turning Up the Heat: Inside the Attacks on Europe’s Refrigeration System6 Nov
- Addressing protocol security gaps in multi-tenant Kubernetes6 Nov
- Firecracker VM Escape: PwnEscape Part 26 Nov
- Medical services company settles with 4 states over 2023 hack of sensitive patient records6 Nov
- Fake security tools on GitHub push backdoors and infostealers6 Nov
- The Good, the Bad and the Ugly in Cybersecurity - Week 45 (2026)6 Nov
- AI Gave Your Incident Archive a Second Job6 Nov
- QNAP says hackers breaching NAS devices in Plex2Shell attacks6 Nov
- Principal Problems: App Registrations, Service Principals, and the Hidden Risk of Multi-Tenant Apps6 Nov
- Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time6 Nov
- Show HN: Agentic Identity Broker, OAuth Delegation for AI Agents6 Nov
- CEO-spoofing scammers used AI to help steal more than $100 million, feds say6 Nov
- Chainalysis says breach exposed credentials for all customers6 Nov
- [NEU] [mittel] JetBrains CLion: Mehrere Schwachstellen6 Nov
- [UPDATE] [mittel] Keycloak: Mehrere Schwachstellen6 Nov
- [UPDATE] [mittel] Keycloak: Mehrere Schwachstellen6 Nov
- [UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen6 Nov
- [NEU] [mittel] JetBrains WebStorm: Mehrere Schwachstellen ermöglichen Codeausführung6 Nov
- [NEU] [hoch] JetBrains IntelliJ IDEA: Mehrere Schwachstellen6 Nov
- [NEU] [hoch] JetBrains You Track: Mehrere Schwachstellen6 Nov
- [NEU] [hoch] Wazuh: Mehrere Schwachstellen6 Nov
- [UPDATE] [mittel] Keycloak: Schwachstelle ermöglicht Erlangen von Administratorrechten6 Nov
- [UPDATE] [mittel] CoreDNS: Schwachstelle ermöglicht Denial of Service6 Nov
- [UPDATE] [hoch] RedHat Build of Keycloak: Mehrere Schwachstellen6 Nov
- [UPDATE] [hoch] Keycloak: Mehrere Schwachstellen6 Nov
- [UPDATE] [hoch] Keycloak: Mehrere Schwachstellen6 Nov
- [UPDATE] [hoch] Mozilla Thunderbird, Firefox ESR und Firefox: Mehrere Schwachstellen6 Nov
- [UPDATE] [hoch] Mozilla Firefox und Thunderbird: Mehrere Schwachstellen6 Nov
- [UPDATE] [hoch] Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen6 Nov
- [UPDATE] [mittel] expat: Schwachstelle ermöglicht Codeausführung6 Nov
- [NEU] [mittel] Keycloak: Mehrere Schwachstellen6 Nov
- [NEU] [mittel] Angular: Schwachstelle ermöglicht Offenlegung von Informationen6 Nov
- [NEU] [UNGEPATCHT] [mittel] Ansible: Schwachstelle ermöglicht Offenlegung von Informationen6 Nov
- [NEU] [hoch] MariaDB: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen6 Nov
- D-Link warns of multiple zero-days in DGS-3130 Series switches6 Nov
- Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It6 Nov
- Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers6 Nov
- After Binance, check what your signing systems can approve6 Nov
- [UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen6 Nov
- [UPDATE] [hoch] OWASP ModSecurity: Mehrere Schwachstellen6 Nov
- [UPDATE] [hoch] Google Chrome / Microsoft Edge: Mehrere Schwachstellen6 Nov
- UK Warns Its Critical Infrastructure Faces Grave Risk6 Nov
- faulTPM: Exposing AMD fTPMs' Deepest Secrets6 Nov
- AI Slop and Hallucinations in Vulnerability Assessment: A Survey on Reasoning Failures and Trustworthy Mitigation6 Nov
- Persona-Model Collapse in Emergent Misalignment6 Nov
- Backdoor Containment via Expert Quarantine and Shutdown in LLMs6 Nov
- Backdoor Purification for LoRA-Tuned LLMs via Null-Space Projection6 Nov
- JailBound: FOL-Guided Jailbreak Evaluation for Exploring LLM Behavioral Boundaries6 Nov
- MemForm: Benchmarking Memory Formation Poisoning in LLM Agents6 Nov
- A Gingerbread House for LLM Agents: Source-Planned Honeypots That Lure Autonomous Attackers into an Isolated Shadow6 Nov
- Beyond Instruction Override: Benchmarking Indirect Prompt Injection with Task-Tampering Attacks6 Nov
- LABBA: LLM-Assisted Behavioral Biometric Authentication6 Nov
- SPILLWAY: Separating Target Admission from Sanitization to Defend Tool-Using Agents against Prompt Injection6 Nov
- A Cyber Range Evaluation of Inductive Autonomous Network Incident Response Agents6 Nov
- Physics-Attested Federated Learning: Securing Collaborative Anomaly Detection in Critical Water Infrastructure6 Nov
- KeHoSu: Keyed Homoglyph Substitution for Authenticated Text Provenance over Copy-Paste Channels6 Nov
- The Promise of Strategic Agentic Scambaiting6 Nov
- Signed but Not Safe: Requirement Integrity in Multi-Agent LLM Handoffs6 Nov
- CANMentor: A Large-Small Model Collaboration Framework for CAN Bus Intrusion Detection6 Nov
- MEvince: Knowledge-Constrained LLM Reasoning for Technique Identification from Malware Reports6 Nov
- Zirah: A Post-Quantum True Random Number Generator Hardware Signer With an Avalanche Noise6 Nov
- Cloudy Skies: Early Detection of Jamming Against Iridium LEO Satellite-IoT Links6 Nov
- SEABench: Benchmarking Endogenous Misalignment In Self-Evolving Agents6 Nov
- SoK: Post-Quantum Cryptography (PQC) Integration in Software Development: Approaches, Gaps, and Future Directions6 Nov
- HackerSignal: A Multi-Source, CVE-Linked Corpus and Prospective Benchmark for Cyber Threat Intelligence6 Nov
- Watermarking Without Standards Is Not AI Governance6 Nov
- AMORT-V1: Checkpointed Post-Quantum Attestation for Industrial Controllers6 Nov
- Escalate or Close: How Fast-Tier Models Handle Held-Out Web Attack Families in Two-Tier Triage6 Nov
- Decision Models as Retrieval Gates Against Injection and Pollution6 Nov
- Cryptanalysis of Isogeny-Based Quantum Money with Rational Points6 Nov
- FBI, CISA warn of cyberattacks targeting refrigeration systems6 Nov
- October 2026 CVE Landscape6 Nov
- US Government Email Systems Open to Abuse Thanks to Typos5 Nov
- Even gem list can run someone else's code5 Nov
- Nearly 1.5 million exposed secrets targeted in new revocation program5 Nov
- APT29's Watering Holes Target Thousands of Mobile Users5 Nov
- OpenAI’s GPT-6 Astra silently obstructed safety research tasks5 Nov
- Harden cooling systems now, feds warn critical infrastructure operators amid attacks5 Nov
- OpenSSH flaw lets attackers log into password-disabled Linux accounts5 Nov
- Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaign5 Nov
- The Exceptions That Break MFA Start in the Boardroom5 Nov
- Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction5 Nov
- Hackers backdoor Linux servers using trojanized CWP web server5 Nov
- DigiCert data breach exposes customer information, identity documents5 Nov
- [NEU] [kritisch] SignalWire FreeSWITCH: Schwachstelle ermöglicht Codeausführung5 Nov
- [NEU] [hoch] Sonatype Nexus Repository Manager: Mehrere Schwachstellen5 Nov
- OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run5 Nov
- [NEU] [UNGEPATCHT] [hoch] Gogs: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und DoS5 Nov
- [NEU] [hoch] Apache OFBiz: Mehrere Schwachstellen5 Nov
- [NEU] [hoch] Drupal Erweiterungen: Mehrere Schwachstellen5 Nov
- [NEU] [hoch] SEPPmail Secure E-Mail Gateway: Mehrere Schwachstellen5 Nov
- [NEU] [hoch] Apache ActiveMQ: Mehrere Schwachstellen5 Nov
- [NEU] [mittel] Vercel Next.js: Mehrere Schwachstellen5 Nov
- [NEU] [hoch] IBM MQ: Mehrere Schwachstellen5 Nov
- [NEU] [hoch] apt: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten5 Nov
- [UPDATE] [hoch] Google Chrome: Mehrere Schwachstellen5 Nov
- [UPDATE] [hoch] Google Chrome / Microsoft Edge: Mehrere Schwachstellen5 Nov
- [UPDATE] [hoch] Google Chrome / Microsoft Edge: Mehrere Schwachstellen5 Nov
- Why waiting for quantum computers to arrive could leave your security exposed5 Nov
- [UPDATE] [hoch] Zammad: Mehrere Schwachstellen5 Nov
- [UPDATE] [mittel] RabbitMQ: Mehrere Schwachstellen5 Nov
- [UPDATE] [hoch] Red Hat Ansible Automation Platform (node-tar, linkify-it, protobufjs, brace-expansion, fast-uri, DOMPurify): Mehrere Schwachstellen5 Nov
- [UPDATE] [hoch] RabbitMQ: Mehrere Schwachstellen5 Nov
- The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-26035 Nov
- [UPDATE] [mittel] git für Windows: Mehrere Schwachstellen ermöglichen Manipulation von Dateien und DoS5 Nov
- [UPDATE] [hoch] Netty: Mehrere Schwachstellen5 Nov
- [UPDATE] [hoch] Wazuh: Mehrere Schwachstellen5 Nov
- [UPDATE] [mittel] RabbitMQ: Mehrere Schwachstellen5 Nov
- GhostMap Android flaw lets malicious app trigger persistent boot loop5 Nov
- CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access5 Nov
- Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says5 Nov
- Private Vulnerability Testing for User Oversharing5 Nov
- Trustworthy RAG: An Evaluation Agent for Detecting Misinformation and Knowledge Poisoning in Generative AI Systems5 Nov
- GhostTac: Manipulating Tactile Sensors without Physical Contact5 Nov
- From Lab to Reality: A Practical Evaluation of Deep Learning Models and LLMs for Vulnerability Detection5 Nov
- KVGuard: A KV Cache Safety Checker for LLM Serving Systems5 Nov
- Grammar-Constrained Decoding Can Jailbreak LLMs into Generating Malicious Code5 Nov
- Timing is Everything: Inferring Temporal Membership in Continually Updated Models5 Nov
- When File Ingestion Misleads Language Models: Measuring and Mitigating Divergences in Office Documents5 Nov
- A.S.E 2.0: Understanding How Repository Context Impacts the Security of LLM-Generated Code5 Nov
- A Hybrid Approach for Automated Security Pattern Recovery5 Nov
- Enforcing Accountable Disclosure in Confidential AI5 Nov
- Securing Web Agents with the Compile-Then-Execute Paradigm5 Nov
- Reconciling Privacy with Provenance for Language Model Watermarks5 Nov
- SenTrojan: Revealing Analog Hardware Trojan Attacks on Sensors5 Nov
- Network Intrusion Forensic Detection System with Explainable Artificial Intelligence and Digital Chain of Custody5 Nov
- Shoot on (Core)Sight: Re-enabling Secure Debug on the RP2350 with Photon-Emission Microscopy and Laser Fault Injection5 Nov
- Towards Early Warning of Real-World Vulnerabilities: An Evidence-Aware Decoupled Method for CVSS Vector Prediction Based on Unstructured Disclosures5 Nov
- Signed but Steerable: Measuring and Closing the Text-Vector Integrity Gap in Offline Retrieval-Augmented Generation5 Nov
- Signed, Sealed, Leaked: Trust Beyond Signature for MCP Toolchains5 Nov
- Assurance-Conditioned Continuous Authorization for Autonomous AI Agents5 Nov
- A Bag of Tricks for Defending Deep Learning-based Face Recognition Pipelines against Backdoor Attacks5 Nov
- Addition by Subtraction: Toward Mitigating Fragile Safety Alignment in Large Language Models5 Nov
- Automated Exploit and Security Test Generation: A Systematic Literature Review5 Nov
- Things that Matter -- Identifying Interactions and IoT Device Types in Encrypted Matter Traffic5 Nov
- Indirect Prompt Injection in the Wild: An Empirical Study of Prevalence, Techniques, and Objectives5 Nov
- LITMUS: Benchmarking Behavioral Jailbreaks of LLM Agents in Real OS Environments5 Nov
- Agent Security is a Systems Problem5 Nov
- Beyond the Prompt: Jailbreaking Function-Calling LLMs via Simulated Moderation Traces5 Nov
- When Relationships Break: Interpreting Network Traffic Anomalies via Dependency Violations5 Nov
- Practice Makes (Im)Perfect: A Look Back at Benchmarking Practices for Microarchitectural Side-Channel Attacks5 Nov
- Systematic Evaluation of Adversarial Jailbreaking Attacks and Defenses Across Seven Large Language Models5 Nov
- UpSafe$^\circ$C: Upcycling for Controllable Safety in Large Language Models5 Nov
- Leveraging Soft Prompts for Privacy Attacks in Federated Prompt Tuning5 Nov
- TROPT: An Open Framework for Unifying and Advancing Discrete Text Optimization5 Nov
- AQUA - A Modular Authentication Quality Modeling Framework5 Nov
- Constraint-Aware Evaluation of Reinforcement Learning and Unsupervised Anomaly Detection for Security Operations Alert Triage5 Nov
- Want to Rent an Internet Address at the White House?5 Nov
- Chainguard endpoints now handle breaking changes5 Nov
- Critical Rails Bug Threatens to Derail Vulnerable Servers4 Nov
- Vercel rolls out new protection against stolen session cookie attacks4 Nov
- More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus4 Nov
- Zyxel fixes zero-day exploited to hack nearly 1,000 network switches4 Nov
- PolinRider Loader Reappears in Hijacked npm Packages4 Nov
- DreamHost confirms data breach exposed FTP logins and webmail sessions4 Nov
- Cyberattack disrupts blood storage refrigeration systems in France4 Nov
- Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root4 Nov
- Mi Scusi, My SCSI: Abusing iSCSI Target Server4 Nov
- NIKKE PC game launcher hacked to spread remote access, data-stealing malware4 Nov
- Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit4 Nov
- mSecure password manager hack prompts password reset warnings4 Nov
- Making HTTP header injection critical with one prompt4 Nov
- Debian apt security update (man-in-the-middle)4 Nov
- Google Calendar phishing campaign hijacks sessions, bypasses MFA4 Nov
- SonicWall warns of unpatched flaws in end-of-life GMS software4 Nov
- Cyberattack wipes cloud data at major Russian hosting provider Beget4 Nov
- EU AI Act transparency rules show why businesses can’t afford to wait4 Nov
- [UPDATE] [hoch] dnsmasq: Mehrere Schwachstellen4 Nov
- [NEU] [mittel] Laravel: Schwachstelle ermöglicht Codeausführung4 Nov
- [NEU] [mittel] Angular: Mehrere Schwachstellen4 Nov
- [NEU] [mittel] BuildKit: Mehrere Schwachstellen4 Nov
- [NEU] [mittel] Grafana: Schwachstelle ermöglicht Offenlegung von Informationen4 Nov
- [NEU] [mittel] Kibana: Mehrere Schwachstellen4 Nov
- [NEU] [kritisch] Zyxel Switch: Schwachstelle ermöglicht Codeausführung4 Nov
- [NEU] [hoch] IBM QRadar SIEM: Mehrere Schwachstellen4 Nov
- [NEU] [UNGEPATCHT] [kritisch] Linksys Router E5600: Mehrere Schwachstellen ermöglichen Privilegieneskalation4 Nov
- [NEU] [mittel] Elasticsearch: Mehrere Schwachstellen4 Nov
- [NEU] [mittel] Nagios Enterprises Nagios XI: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten4 Nov
- [NEU] [mittel] IBM WebSphere Application Server: Mehrere Schwachstellen ermöglichen Denial of Service4 Nov
- [NEU] [hoch] Ruby on Rails: Mehrere Schwachstellen4 Nov
- [UPDATE] [hoch] Squid: Mehrere Schwachstellen4 Nov
- [UPDATE] [mittel] GNU libc: Mehrere Schwachstellen4 Nov
- [UPDATE] [mittel] Red Hat Build of Apache Camel for Quarkus (sshd-core, libthrift, org.hl7.fhir.utilities): Mehrere Schwachstellen4 Nov
- [UPDATE] [hoch] Rsync: Mehrere Schwachstellen4 Nov
- [UPDATE] [hoch] Apache Portable Runtime (APR): Mehrere Schwachstellen4 Nov
- [UPDATE] [mittel] Red Hat Ansible Automation Platform (ansible-core): Schwachstelle ermöglicht Codeausführung4 Nov
- [UPDATE] [mittel] Prometheus: Mehrere Schwachstellen4 Nov
- [UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellen4 Nov
- [UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellen4 Nov
- [UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellen4 Nov
- [UPDATE] [hoch] Red Hat OpenShift Container Platform: Schwachstelle ermöglicht Codeausführung4 Nov
- [UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellen4 Nov
- [UPDATE] [hoch] Red Hat Enterprise Linux (Quarkus): Mehrere Schwachstellen4 Nov
- [UPDATE] [hoch] Apache Solr: Mehrere Schwachstellen4 Nov
- [UPDATE] [hoch] Oracle Communications Applications: Mehrere Schwachstellen4 Nov
- [UPDATE] [hoch] Red Hat Produkte: Mehrere Schwachstellen4 Nov
- CISA flags WordPress RCE flaw as actively exploited in attacks4 Nov
- Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory4 Nov
- [UPDATE] [mittel] FasterXML Jackson: Mehrere Schwachstellen ermöglichen Denial of Service4 Nov
- [UPDATE] [hoch] Red Hat Enterprise Linux (libpcap): Schwachstelle ermöglicht Offenlegung von Informationen und Codeausführung4 Nov
- [UPDATE] [mittel] Nvidia GPU Display Treiber: Mehrere Schwachstellen4 Nov
- [UPDATE] [mittel] CPython: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Manipulation von Dateien4 Nov
- [UPDATE] [mittel] Red Hat Enterprise Linux (undici-nodejs): Mehrere Schwachstellen4 Nov
- China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor4 Nov
- [NEU] [hoch] Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen4 Nov
- [NEU] [hoch] SolarWinds Dameware: Mehrere Schwachstellen4 Nov
- [NEU] [hoch] Emerson Ovation: Mehrere Schwachstellen4 Nov
- Hackers use n-day exploits in zero-click attacks on iOS, Android devices4 Nov
- Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction4 Nov
- Phishing-Resistant Isn't Enough; Yubico Takes Aim at Identity-Verification Gap4 Nov
- Hackers hijack cPGuard autoupdate to deploy backdoor, steal data3 Nov
- WorkOS says attacker used ARTEX AI to breach internal sales app3 Nov
- Binance says fake job interview led to $6.3 billion crypto heist3 Nov
- Several German lawmakers and foreign policy staff received Apple warnings on spyware3 Nov
- British businesses caught in Europe-wide supermarket fridge attacks3 Nov
- LLMjacking Emerges as Thriving Cybercriminal Enterprise3 Nov
- Barracuda warns of critical flaws allowing root access to devices3 Nov
- [UPDATE] [hoch] Internet Systems Consortium BIND: Mehrere Schwachstellen3 Nov
- 3AM Affiliate Embraces AI-Like Loops in European School Attack3 Nov
- UK school estate hit by 3AM ransomware in suspected AI-assisted attack3 Nov
- Russia dismantles infrastructure of VasyGrek cybercrime group, detains three suspects3 Nov
- Google adds new $250,000 Cloud VRP reward for Root-in-Cloud bugs3 Nov
- AIs Hacking the Law3 Nov
- [UPDATE] [kritisch] Axis Camera Station und Device Manager: Mehrere Schwachstellen3 Nov
- [NEU] [mittel] vllm: Mehrere Schwachstellen3 Nov
- [NEU] [hoch] TianoCore EDK2: Schwachstelle ermöglicht Codeausführung3 Nov
- [NEU] [mittel] WSO2 API Manager: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen3 Nov
- [UPDATE] [hoch] ffmpeg: Mehrere Schwachstellen3 Nov
- [NEU] [hoch] Absolute Secure Access: Mehrere Schwachstellen3 Nov
- [NEU] [hoch] QT: Schwachstelle ermöglicht Denial of Service3 Nov
- [UPDATE] [mittel] Red Hat OpenShift Container Platform (kubelet, cri-o, kube-apiserver): Schwachstelle ermöglicht Denial of Service3 Nov
- [UPDATE] [hoch] Red Hat OpenShift Service Mesh: Schwachstelle ermöglicht Codeausführung3 Nov
- [UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellen3 Nov
- [UPDATE] [mittel] Red Hat OpenShift GitOps: Mehrere Schwachstellen3 Nov
- [UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellen3 Nov
- [UPDATE] [hoch] Red Hat OpenShift: Mehrere Schwachstellen3 Nov
- Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware3 Nov
- Harvard University data breach exposed info of 851,000 accounts3 Nov
- [UPDATE] [hoch] Red Hat Enterprise Linux (pki-core und dogtag-pki): Mehrere Schwachstellen3 Nov
- MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT devices3 Nov
- Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors3 Nov
- Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials3 Nov
- Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies3 Nov
- UK faces ‘unprecedented rise’ in cyberattacks in coming months, warns cyber chief3 Nov
- WorkOS reports security breach2 Nov
- Unit 42 Threat Intelligence Highlights - Nov. 2, 20262 Nov
- One Compromised Laptop, Billions Lost: The Binance Attack-Path Warning2 Nov
- Beyond DKIM key rotation: understanding email replay attacks2 Nov
- Russia's statistics agency confirms cyberattack claimed by Belarusian and Ukrainian hackers2 Nov
- DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment2 Nov
- Hackers hijack Ukrainian and Russian alert apps to push fake nuclear and chemical warnings2 Nov
- [NEU] [hoch] Microsoft Azure, Entra und Exchange: Mehrere Schwachstellen2 Nov
- [NEU] [hoch] Red Hat Enterprise Linux (perl-yaml, pillow): Mehrere Schwachstellen2 Nov
- [NEU] [hoch] Gitea: Mehrere Schwachstellen2 Nov
- [NEU] [hoch] JetBrains Toolbox App: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen2 Nov
- [NEU] [hoch] JetBrains (IntelliJ IDEA , PyCharm, PhpStorm, WebStorm, CLion, DataGrip, DataSpell): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen2 Nov
- [NEU] [UNGEPATCHT] [mittel] phpMyAdmin: Mehrere Schwachstellen2 Nov
- [NEU] [UNGEPATCHT] [kritisch] Linksys Router: Schwachstelle ermöglicht Erlangen von Administratorrechten2 Nov
- [NEU] [hoch] Apache Wicket: Mehrere Schwachstellen2 Nov
- [NEU] [hoch] Traefik: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen2 Nov
- [NEU] [UNGEPATCHT] [kritisch] Flowise: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes2 Nov
- [NEU] [mittel] ImageMagick: Mehrere Schwachstellen2 Nov
- [NEU] [hoch] Samsung Exynos: Mehrere Schwachstellen2 Nov
- [NEU] [UNGEPATCHT] [mittel] GNU libc: Schwachstelle ermöglicht Denial of Service und Codeausführung2 Nov
- [NEU] [mittel] Red Hat Enterprise Linux (PyJWT): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen2 Nov
- [UPDATE] [hoch] pgAdmin: Mehrere Schwachstellen2 Nov
- [UPDATE] [hoch] n8n: Mehrere Schwachstellen2 Nov
- [UPDATE] [hoch] Dovecot: Mehrere Schwachstellen2 Nov
- [UPDATE] [hoch] WebKitGTK: Schwachstelle ermöglicht Codeausführung2 Nov
- [UPDATE] [hoch] util-linux: Mehrere Schwachstellen2 Nov
- [UPDATE] [hoch] Microsoft Developer Tools: Mehrere Schwachstellen2 Nov
- [UPDATE] [hoch] pgAdmin: Mehrere Schwachstellen2 Nov
- [UPDATE] [hoch] rsyslog: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung2 Nov
- [UPDATE] [hoch] NGINX NGINX Plus: Mehrere Schwachstellen2 Nov
- [UPDATE] [hoch] NGINX und NGINX Plus: Mehrere Schwachstellen2 Nov
- [UPDATE] [hoch] NGINX Open Source und NGINX Plus: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung2 Nov
- [UPDATE] [mittel] cURL: Mehrere Schwachstellen2 Nov
- [UPDATE] [hoch] Apache HTTP Server: Mehrere Schwachstellen2 Nov
- [UPDATE] [hoch] Roundcube: Schwachstelle ermöglicht Codeausführung2 Nov
- [NEU] [mittel] Microsoft Visual Studio: Schwachstelle ermöglicht Offenlegung von Informationen2 Nov
- [UPDATE] [mittel] SLF4J: Schwachstelle ermöglicht Codeausführung2 Nov
- [NEU] [hoch] SQLite: Mehrere Schwachstellen2 Nov
- Over 1,000 GitLab servers vulnerable to ongoing RCE attacks2 Nov
- AI Vulnerability Finding2 Nov
- Backporting security fixes at scale with Codex2 Nov
- [UPDATE] [mittel] Bouncy Castle: Mehrere Schwachstellen2 Nov
- [UPDATE] [hoch] Apache HTTP Server: Mehrere Schwachstellen2 Nov
- [UPDATE] [hoch] IBM App Connect Enterprise: Mehrere Schwachstellen2 Nov
- Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers2 Nov
- Synology warns of C3RB3R ransomware attacks targeting NAS devices2 Nov
- Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data2 Nov
- Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts2 Nov
- CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations2 Nov
- DeepWeave: Weaving Neural and Symbolic Evidence for ML-Based Network Intrusion Detection System2 Nov
- Beyond Smart Homes: Characterizing IoT Vulnerabilities Across Sectors, Vendors, and Products2 Nov
- SecPO: Principled Adversarial Training for Prompt Injection Security2 Nov
- LanG 2.0: Energy-Efficient Agentic AI for Semi-Automated Security Operations at Scale2 Nov
- Prevented is Not Protected: What Attack Success Rate Hides about RAG2 Nov
- How Much Can Tool Calls Reveal About You? Privacy Leakage from Tool-Call Traces2 Nov
- When Safety Checks Become Privacy Risks: A Privacy-Preserving Paradigm for LLM Agent Safety Auditing2 Nov
- Characterizing Recoverable Expert-Utilization Signatures in Fine-Tuned Mixture-of-Experts LLMs2 Nov
- What Standard Evaluations Hide About Detectors of Hijacked LLM Agents: Rare Attacks, Unseen Tools and Benchmark Transfer2 Nov
- Erase the Injected Region: Multimodal Prompt-Injection Defense with On-Policy Self-Distillation2 Nov
- ANGLER: Verifier-Grounded Benchmarking with an Adaptive Attacker for Web Agents2 Nov
- RiskyPy: Toward Model-Calibrated Prompt Generation for Joint Security and Functionality Evaluation of LLM-Generated Code2 Nov
- The Guard That Cried Wolf: How Scary Words Make Agent Guardrails Refuse Legitimate Actions2 Nov
- Inadvertent Context Leakage in Language Models2 Nov
- Accept Changes, Reject Attacks: Robust Memory Management for LLM Agents2 Nov
- Closing the Applied Cybersecurity Gap in Critical Infrastructure: A Cyber-to-Physical Security Assessment Framework for Water Systems2 Nov
- MetaVul: Agentic Harness Discovery for Vulnerability Detection2 Nov
- Characterizing LLM Agent Behaviors in Module Shadowing Environments2 Nov
- "Shall We Approve?" Consequence-Aware Approval for Autonomous Coding Agents2 Nov
- Expected Harm: Rethinking Safety Evaluation of (Mis)Aligned LLMs2 Nov
- From Training Exposure to Membership Evidence: A Controlled Study of OLMo 22 Nov
- Adaptive Dynamic Security for Operational Technology Against AI-Powered Attacks2 Nov
- STRIATUM-CTF: A Protocol-Driven Agentic Framework for Autonomous CTF Solving2 Nov
- When AI Investigators Cannot Trust Their Tools: Conflict-Aware Evidence Verification for Cyber Threat Investigation2 Nov
- Towards Elastic Least Privilege for Agent Planning2 Nov
- Does Showing Agents the Privilege of Their Tools Reduce Over-Privileged Tool Selection?2 Nov
- Simple Features Beat Most AI Control Monitors2 Nov
- PrivacyFlow: Privacy in AI Agents through Information Flow Analysis and Consequence-Aware Risk Management2 Nov
- Fooling Relying Parties of the EUDI Wallet Architecture: Credential Pooling Attacks and CRESTA, a Standard-Compliant Countermeasure2 Nov
- Inside a successful AWS European Sovereign Cloud exercise to demonstrate independent operation2 Nov
- The Good, the Bad and the Ugly in Cybersecurity - Week 44 (2026)30 Oct
- Stopping Node2Shell: How SentinelOne Protects Customers From Brotli-Based Remote Code Execution30 Oct
- BUSTA: Teaching Small Language Models to Reason About Binary Execution28 Oct
- VulDec: Vulnerability Detection in Binaries via Neural Decompilation27 Oct
- The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)23 Oct
- Blinder Tunnel Campaign Targets Iraqi Infrastructure6 Oct
- Chainguard Actions is Generally Available: Hardening 1,000+ GitHub Actions and removing transitive CI/CD risks6 Oct
- Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access6 Oct
- [tl;dr sec] #348 - Google's PageBreak Scanner, Perplexity's Agent Security Tool, Defending Agentically1 Oct
- Why AI Coding Agents Keep Writing Broken Access Control1 Oct
- From SELECT to SYSADMIN with SQL Copilot (CVE-2026-65669)30 Sept
- This Shit is Hard: Building forkstore29 Sept
- H1 2026 Malware Vulnerability Trends3 Sept
- Demystifying Agent Tradecraft: Introducing SpecterOps Skills2 Sept
- Version 1.0: SonicWall SMA1000 - Schwachstellen werden aktiv ausgenutzt2 Sept
- Password spraying campaign targets AWS root user accounts across 150+ organizations31 Aug
- BengalSEO Part 1: Anatomy of the Operation24 Aug
- A First Look at Evo Agentic AppSec: Agentic Remediation and Malicious Code Defense4 Aug
- The keyv and cacheable npm Supply Chain Attack: Inside the Mini Shai-Hulud Campaign4 Aug
- Anthropic's Fever Dream: Claude's package that stole real keys31 Jul
- Escaping Linux Sandboxes via PipeWire (CVE-2026-5674)30 Jul
- [tl;dr sec] #339 - Hugging Face's Incident Report, Context Bombs, AI does Cryptanalysis30 Jul
- Dealing with AI-Generated Extortion30 Jul
- Shipping post-quantum cryptography to Python30 Jun
- Accelerating EDR Evasion with LLM-Driven Analysis29 Jun
- The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API29 Jun
- Flash Alert: From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira5 Aug
Updated
24 stories- [UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen6 Nov
- [UPDATE] [hoch] Mozilla Firefox und Thunderbird: Mehrere Schwachstellen6 Nov
- [UPDATE] [hoch] Mozilla Firefox und Thunderbird: Mehrere Schwachstellen6 Nov
- [UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellen4 Nov
- Managing identity source transition for AWS IAM Identity Center20 Oct
- Building your AI vulnerability harness, Part 17 Oct
- ShinyHunters Extorted Boeing Spin-off Prior to Arrests7 Oct
- Frontier models found the vulnerabilities. Only the attacker found the chains.7 Oct
- How to fix a bug in a fix6 Oct
- Smashing the token limit with overlapping fragments5 Oct
- MECCHA CHAMELEON can't hide from the RCE3 Sept
- The dark figure of supply chain detection1 Sept
- Who was behind the attack? Possibly nobody5 Aug
- Of Course We Built a WSUS Ludus Lab5 Aug
- Weaponizing Windows Updates with NotWSUSpicious5 Aug
- A few notes on AWS Nitro Enclaves: KMS integration5 Aug
- The Hugging Face Incident Was a Governance Failure5 Aug
- Mythic 4 Public Beta: More Than a New Coat of Paint4 Aug
- Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks4 Aug
- ConfigManBearPig 2.0 – Things Are Getting Cereal3 Aug
- LLM Heist: Hijacking LiteLLM for Traffic Interception, Key Theft, and Tool-Call Injection3 Aug
- Google’s Continued Disruption of Malicious Residential Proxy Networks2 Jul
- Breaking Down the White House’s Actions on Post-Quantum Cryptography Readiness2 Jul
- Commit to Compromise: A New Threat Actor Targeting the Cryptocurrency Industry's Software Development Infrastructure27 May