The Hacker News (1 hour ago)
At some point your security will fail. This isn’t pessimism. It’s not because your team and tools aren’t sophisticated enough. It’s the reason we have detections in the first place.
Read the full story on The Hacker News.
An iOS sandbox escape published on GitHub lets an app read other apps’ files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login credentials at risk of exposure to malicious apps, Binance warned today.
SAP patched 35 vulnerabilities in its November 2026 security updates, including four maximum-severity issues affecting its NetWeaver, Web Dispatcher, and Gateway software.
It’s a bad one, and it’s been in the code for a decade: A newly disclosed flaw involving OpenSSH and musl, dubbed “*sshole,” allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts configured to block password authentication simply by entering an oversized password.
AI is driving a rise in fraud – but it can also be used to shut down scams.
France calls attack ‘an unprecedented campaign in terms of its scale and level of aggressiveness’
Any net-connected vehicle from two automakers could be remotely opened and started — now-patched failures with API backend security showcase a lack of 101-level best practices
An iMessage flaw could let a remote attacker join a group chat and receive its messages, Apple said yesterday, and it released updates to fix it. The updates also fix a separate iMessage flaw that could let someone added to a group access messages sent before they joined.
The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal that’s used to break into victims’ Microsoft Exchange servers with an aim to surreptitiously collect emails.
Four flaws that attackers could exploit without logging in were fixed today as part of SAP’s monthly Security Patch Day—the vendor rates all four 10.0, the maximum CVSS score.
An October cyberattack on refrigeration controllers at about 700 French retail sites was carried out by a cyber unit of Iran’s Islamic Revolutionary Guard Corps (IRGC), the French government said yesterday.
65 active sources
20 Turkish · 45 English
All sources
