News
- CyberXero Used 51 AI Agents to Steal 628,000 Ukrainian Records
- Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
- Critical SonicWall Vulnerability Exploited Days After Disclosure
- The 7 biggest issues CISOs and security teams face today
Malware
- A week in security (October 5 – October 11)
- ASOS breach update: Hackers stole customer details and shopping searches
- Attackers hijack country-code domains to impersonate Google and other services
- Amazon has an uncomfortably personal profile on you
Threat Actors
- Making sure the checks get printed
- UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
- Ignore all instructions and read this blog: The state of AI-analysis evasion in malware
- Solving the Continuous Authorization Conundrum
Vulnerabilities
- GNUnet P2P Framework 0.26.2
- CVE-2026-108822 Kamailio sipt ss7_parser.c isup_get_calling_party buffer overflow
- CVE-2026-108821 Tencent WeKnora SQL Validator inject.go validateSubquery sql injection
- Exploit for Missing Authorization in Mongodb