2026-10-17 16:29 UTC North Korean IT Workers Used Stolen US Identities to Earn $3 Million Security Affairs P0
2026-10-17 15:18 UTC Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack BleepingComputer P0
2026-10-17 14:32 UTC Drupal patches critical RCE flaws, warns exploits may emerge soon BleepingComputer P15
2026-10-17 11:11 UTC MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon The Hacker News P0
2026-10-17 11:00 UTC Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel Security Week P0
2026-10-17 10:35 UTC U.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog Security Affairs P30
2026-10-17 10:08 UTC BAE Systems Cyber Incident Takes US Bankruptcy Noticing Center Offline for a Week Security Affairs P0
2026-10-17 08:55 UTC AI Agents Accessed Indian Organizations Without Authorization, CERT-In Warns Security Affairs P0
2026-10-17 06:16 UTC Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants The Hacker News P0
2026-10-16 20:34 UTC BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs Dark Reading P25
2026-10-16 20:00 UTC Critical BlockStrap flaw lets hackers run code on Magento servers BleepingComputer P5
2026-10-16 19:22 UTC Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform Dark Reading P0
2026-10-16 19:13 UTC Enterprise AI Enters Risk Management Phase as Security Concerns Rise Dark Reading P0
2026-10-16 17:48 UTC Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug The Hacker News P10
2026-10-16 17:47 UTC Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026 Palo Alto Networks Unit 42 P0
2026-10-16 17:37 UTC CVE-2026-16756 - Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service AWS Security Bulletins P5
2026-10-16 17:37 UTC Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react AWS Security Bulletins P5
2026-10-16 17:37 UTC CVE-2026-16317 and CVE-2026-16318: Issues with s2n-tls: an open-source implementation of the TLS/SSL protocols AWS Security Bulletins P5
2026-10-16 17:37 UTC CVE-2026-18394 - Incorrect authorization in Strands Agents Tools http_request tool AWS Security Bulletins P5
2026-10-16 17:37 UTC CVE-2026-18140 - Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers AWS Security Bulletins P5
2026-10-16 17:37 UTC CVE-2026-16796 - Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages() AWS Security Bulletins P5
2026-10-16 17:37 UTC CVE-2026-16584 - AWS API MCP Server Security Policy Bypass via Startup Failure AWS Security Bulletins P5
2026-10-16 17:34 UTC CVE-2026-102551 & CVE-2026-102552 - Issue with FreeRTOS-Plus-TCP AWS Security Bulletins P5
2026-10-16 17:34 UTC CVE-2026-109587 & CVE-2026-109588 - Issue with FreeRTOS-Kernel AWS Security Bulletins P5
2026-10-16 17:20 UTC Targeted ads installed Candiru spyware in zero-click attacks BleepingComputer P0
2026-10-16 16:43 UTC Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor The Hacker News P0
2026-10-16 16:16 UTC UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing The Hacker News P0
2026-10-16 16:00 UTC Managing open-weight model risk in enterprise deployments Microsoft Security Blog P0
2026-10-16 15:46 UTC Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal Proofpoint Threat Insight P0
2026-10-16 14:09 UTC In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit Security Week P0
2026-10-16 14:03 UTC OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract The Hacker News P0
2026-10-16 13:50 UTC Employees using personal ChatGPT at work? Here's what IT admins need to do BleepingComputer P0
2026-10-16 13:50 UTC Proofpoint CEO on acquiring Varonis for $6.3B: ‘Opportunities like this don’t come every day’ Proofpoint Threat Insight P0
2026-10-16 13:30 UTC Moscow police detain suspected DataSuckers hackers linked to breaches in Ukraine and Russia The Record P0
2026-10-16 13:05 UTC Baltimore suburb confirms August data breach after ransomware claims The Record P15
2026-10-16 13:00 UTC Suspected Chinese espionage attackers abusing BeyondTrust IT support zero-day The Record P25
2026-10-16 12:01 UTC Burger King Japan data breach exposes 11 million customer records BleepingComputer P0
2026-10-16 11:46 UTC BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts Security Week P0
2026-10-16 11:36 UTC DORA TLPT Requirements Explained: Where Threat Intelligence Fits ANY.RUN Blog P0
2026-10-16 11:05 UTC U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog Security Affairs P35
2026-10-16 10:32 UTC OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks Security Week P0
2026-10-16 09:08 UTC PEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManager Security Affairs P0
2026-10-16 08:44 UTC Microsoft: October Windows update may break Smart App Control BleepingComputer P5
2026-10-16 07:37 UTC BAE Systems cyberattack disrupts US federal court operations BleepingComputer P0
2026-10-16 07:31 UTC CenterPoint Energy Data Breach: More Than 1 Million Texans Affected Security Affairs P0
2026-10-16 06:55 UTC China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers The Hacker News P30
2026-10-16 06:53 UTC CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing The Hacker News P0
2026-10-16 06:18 UTC BeyondTrust patches zero-day exploited in attacks since August BleepingComputer P55
2026-10-16 05:00 UTC ZDI-26-785: FreeBSD Kernel Shared Memory Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability Zero Day Initiative P15
2026-10-16 05:00 UTC ZDI-26-784: FreeBSD Kernel kqueue Use-After-Free Local Privilege Escalation Vulnerability Zero Day Initiative P15
2026-10-16 05:00 UTC ZDI-26-783: LibreOffice PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Zero Day Initiative P20
2026-10-16 05:00 UTC ZDI-26-782: LibreOffice PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Zero Day Initiative P20
2026-10-16 05:00 UTC ZDI-26-781: LibreOffice EMF+ Brush Integer Overflow Remote Code Execution Vulnerability Zero Day Initiative P20
2026-10-16 05:00 UTC ZDI-26-780: X.Org Server GestureBuildSprite Use-After-Free Information Disclosure Vulnerability Zero Day Initiative P5
2026-10-16 05:00 UTC ZDI-26-779: (0Day) Sparx Systems Enterprise Architect XSLT Debugger XML External Entity Processing Information Disclosure Vulnerability Zero Day Initiative P5
2026-10-16 04:59 UTC PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions The Hacker News P5
2026-10-16 02:00 UTC ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th) SANS Internet Storm Center P0
2026-10-16 00:46 UTC Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th) SANS Internet Storm Center P0
2026-10-15 23:03 UTC Panchan's Mining Island [Guest Diary], (Wed, Oct 14th) SANS Internet Storm Center P0
2026-10-15 22:00 UTC AI-Powered Espionage Campaign Targets Government Linux Infrastructure Palo Alto Networks Unit 42 P0
2026-10-15 21:55 UTC F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud Dark Reading P0
2026-10-15 20:46 UTC Federal bankruptcy courts dealing with outages after contractor cyberattack The Record P0
2026-10-15 20:43 UTC AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too Dark Reading P0
2026-10-15 20:25 UTC Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers BleepingComputer P20
2026-10-15 20:24 UTC Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory The Hacker News P15
2026-10-15 19:48 UTC Android gets AI defenses against messaging scams, fake calls BleepingComputer P0
2026-10-15 19:37 UTC Cisco Meraki Security Hardening Release: October 2026 Cisco Security Advisories P30
2026-10-15 19:21 UTC U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog Security Affairs P40
2026-10-15 19:03 UTC Issue in the Linux kernel virtio-net/TAP networking path affecting KVM-based hypervisors AWS Security Bulletins P5
2026-10-15 19:00 UTC Zero-click spyware infecting devices through online ads, researchers say The Record P0
2026-10-15 18:49 UTC ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More The Hacker News P0
2026-10-15 18:33 UTC Silent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and Government Security Affairs P0
2026-10-15 18:20 UTC Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth BleepingComputer P0
2026-10-15 18:00 UTC The Q3 Vulnerability Pulse: Discovery ≠ Exploitation Cisco Talos Intelligence Blog P0
2026-10-15 16:51 UTC Watch Now: Zero Trust Strategies Summit – All Sessions Available on Demand Security Week P0
2026-10-15 16:41 UTC CVE-2026-110812 - Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune AWS Security Bulletins P5
2026-10-15 16:37 UTC CVE-2026-15737 - Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK AWS Security Bulletins P5
2026-10-15 16:37 UTC CVE-2026-15415 - Path traversal and arbitrary file write in the workflow linters of aws-healthomics-mcp-server AWS Security Bulletins P5
2026-10-15 16:37 UTC CVE-2026-15895: OS command injection in jsii-diff in AWS jsii AWS Security Bulletins P5
2026-10-15 16:37 UTC CVE-2026-12283 - Issue with Athena Federated Query Synapse Connector AWS Security Bulletins P5
2026-10-15 16:37 UTC CVE-2026-15746 - Credential disclosure in Strands Agents Tools elasticsearch_memory tool AWS Security Bulletins P5
2026-10-15 16:37 UTC CVE-2026-8838 - Remote Code Execution in amazon-redshift-python-driver AWS Security Bulletins P20
2026-10-15 16:37 UTC CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLI AWS Security Bulletins P5
2026-10-15 16:37 UTC CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths AWS Security Bulletins P5
2026-10-15 16:37 UTC Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 & CVE-2026-8597) AWS Security Bulletins P5
2026-10-15 16:37 UTC CVE-2026-8178 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver AWS Security Bulletins P20
2026-10-15 16:37 UTC Fragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux Kernel AWS Security Bulletins P10
2026-10-15 16:37 UTC CVE-2026-8686 - Heap out-of-bounds read in coreMQTT MQTT5 property parsing AWS Security Bulletins P5
2026-10-15 16:10 UTC AWS Security Agent (now part of AWS Continuum) exploited 33 of 37 new real-world CVEs AWS Security Blog P0
2026-10-15 16:01 UTC Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads The Hacker News P0
2026-10-15 16:00 UTC Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks The Hacker News P0
2026-10-15 15:17 UTC Vulnerability Management Isn't About the Score — It's About How It Applies to You Dark Reading P0
2026-10-15 14:30 UTC UK Legal Aid Agency hack worse than thought, with stolen records dating back to 1978 The Record P0
2026-10-15 14:25 UTC Thoma Bravo's Proofpoint to buy Varonis Systems in $6.3 billion all-cash deal Proofpoint Threat Insight P0
2026-10-15 14:22 UTC Proofpoint to Acquire Varonis in $6.3 Billion Cybersecurity Deal Proofpoint Threat Insight P0