SecurityWeek (1 day ago)
CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations.
Read the full story on SecurityWeek.
The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system on Tuesday.
The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.
Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities.
TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands.
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user’s package without having to steal their credentials.
Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.
Experiments show cheap TV boxes can run capable AI models, and small models may soon be able to spread across such devices on their own.
Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions.
IBM’s Steve Wallin talks to SecurityWeek on the effect of AI-driven attacks on enterprise defenses.
A small circuit board hidden under the signers’ screens read user data and transmitted it to the attackers.
72 active sources
27 Turkish · 45 English
All sources
