October 22, 2026

Vulnerability

Snort 3 vulnerabilities enabling denial of service on Cisco firewalls and security products

Cisco Fixes 13 Snort 3 Vulnerabilities, Including CVSS 9.0 Out-of-Bounds Write

Do Son October 22, 2026 0
PHP2Shell remote code execution flaws exploited in the wild after PoC release

PHP2Shell Exploited in the Wild as PoC Exploits and Full Details Go Public

Do Son October 22, 2026 0
Splunk vulnerabilities in Splunk Enterprise and Splunk SOAR fixed in October 2026 security update

Splunk Fixes 31 Vulnerabilities in Enterprise and SOAR, Three Rated CVSS 9.9

Do Son October 22, 2026 0
Apache Pulsar vulnerabilities and Apache IoTDB security update diagram for CVE-2026-105944, CVE-2026-105869, and CVE-2026-59229

Apache Patches 17 Critical and High Flaws in Pulsar and IoTDB

Do Son October 22, 2026 0

Cyber Security

Lazarus Operation FlashHole Abuses CrossWeb EX and GitHub to Spy on South Korean Firms Operation FlashHole attack chain used by the Lazarus Group against South Korean firms via CrossWeb EX

Lazarus Operation FlashHole Abuses CrossWeb EX and GitHub to Spy on South Korean Firms

October 21, 2026 0
Attackers Abuse ConnectWise Cloud Backup Credential to Breach Over 300 Microsoft 365 Tenants Microsoft Entra sign-in logs showing ConnectWise Cloud Backup and ConnectWise Cloud Backup breach activity

Attackers Abuse ConnectWise Cloud Backup Credential to Breach Over 300 Microsoft 365 Tenants

October 21, 2026 0
Ahold Delhaize Cyberattack Knocks Brand Websites and Apps Offline in US and Europe Ahold Delhaize cyberattack - Albert Heijn outage as grocery brand websites and apps go offline

Ahold Delhaize Cyberattack Knocks Brand Websites and Apps Offline in US and Europe

October 20, 2026 0
UNC7017 Executes AOMEI Supply Chain Attack Using Five-Minute Server Tampering Diagram of the AOMEI supply chain attack and AOMEI supply chain attack UNC7017 update workflow #AOMEISupplyChainAttack #UNC7017

UNC7017 Executes AOMEI Supply Chain Attack Using Five-Minute Server Tampering

October 19, 2026 0

Malware Alert

Exposed Attacker Server Reveals AI Agent Toolkit and a Second PaperCut RCE Path PaperCut RCE campaign server exposing an AI-assisted exploitation toolkit and reverse SOCKS5 pivots

Exposed Attacker Server Reveals AI Agent Toolkit and a Second PaperCut RCE Path

October 22, 2026 0
LiteLLM 1.107.0 Compromised to Steal Cloud, AI Tool and Developer Credentials LiteLLM supply chain attack delivering a PyPI credential stealer through Python startup hooks

LiteLLM 1.107.0 Compromised to Steal Cloud, AI Tool and Developer Credentials

October 21, 2026 0
333 Tor Exit Nodes Hijacked by Ebury Malware for SSH Attacks Tor exit nodes infected with Ebury malware redirecting SSH connections to interception servers

333 Tor Exit Nodes Hijacked by Ebury Malware for SSH Attacks

October 21, 2026 0
Aoki Infostealer Harvests API Keys and Tokens From AI Coding Assistants Aoki infostealer and Aokigahara Aoki infostealer AI credential theft diagram

Aoki Infostealer Harvests API Keys and Tokens From AI Coding Assistants

October 21, 2026 0

Data Leak

Railway Security Incident Exposes Customer Environment Variables and Pauses All Deployments Railway security incident - attackers may have accessed decrypted Railway environment variables and API keys

Railway Security Incident Exposes Customer Environment Variables and Pauses All Deployments

October 22, 2026 0
Sourcenext Data Breach Exposes 22.5M User Records Sourcenext data breach notice revealing API exploitation and account password exposure

Sourcenext Data Breach Exposes 22.5M User Records

October 20, 2026 0
OpenCode Security Breach Exposes 1.4% of Console Users OpenCode security breach exposing stored third-party API keys in OpenCode Console, linked to an AI distillation attack

OpenCode Security Breach Exposes 1.4% of Console Users

October 20, 2026 0
UpdraftPlus Data Breach Leads to UpdraftCentral Backdoor Attacks on WordPress Sites UpdraftPlus data breach - stolen keys used in UpdraftCentral backdoor attacks on WordPress sites

UpdraftPlus Data Breach Leads to UpdraftCentral Backdoor Attacks on WordPress Sites

October 20, 2026 0
Next Page ❯