SecurityWeek (1 hour ago)
Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution.
Read the full story on SecurityWeek.
State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not yet know where the data came from.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerabilities impacting Plex Media Server that’s collectively called Plex2Shell.
A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare organization.
Researchers say the developer’s account was compromised in March with a GlassWorm-linked loader.
PHP will ship an out-of-cycle security release at 14:00 UTC today, October 21, for two critical vulnerabilities that its security team has rated 9.2 on the CVSS v4.0 scale but has not described. Security researchers at watchTowr say the two flaws allow remote code execution.
The first phase will cover up to 500 utilities, which will get free security tools, equipment, deployment help and training.
NIST, CISA and NSA share ten voluntary practices for preparing for, detecting, responding to, recovering from, and reporting rogue AI agent incidents.
Across multiple short compromise windows, users were served a downloader for the ShinyRoad modular backdoor framework.
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
The company has restored many websites and apps in Europe and expects e-commerce brands in the US to be restored in days.
72 active sources
27 Turkish · 45 English
All sources
