UPDATED
CISA Alerts · · Medium severity
View CSAF Summary PSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This...
CISA Alerts · · Medium severity
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device. The following versions of InterSystems Corporation InterSystems IRIS for Health...
CISA Alerts · · Medium severity
View CSAF Summary Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. Siemens is preparing fixes and recommends...
CISA Alerts · · Medium severity
View CSAF Summary The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker...
The Record by Recorded Future · · Medium severity
The issue was publicized by cybersecurity researcher Scott Helme, who published a blog saying that instead of a random 384-bit number, one of the company's private keys was just the number four.
The Hacker News · · Critical severity
Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel. One of them,...
The Hacker News · · Medium severity
This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays....
HackRead · · Medium severity
Cardano payroll could support ADA salaries and automated payments, but employers must address price volatility, tax obligations, wallet security and compliance.
Inc42 Media · · Medium severity
Bengaluru-based cybersecurity company eMudhra, which recently found itself at the centre of a security key issue, has announced plans to voluntarily wind down its global secure sockets layer and transport layer security (SSL/TLS)...
Ars Technica · · Medium severity
Amazon has warned that vulnerabilities in a programming language that underpins much of the Internet, discovered using AI tools, are being “broadly exploited” as governments and companies rush to secure their systems. The world’s...
The Verge · · Medium severity
The Nintendo Switch 2 has apparently been jailbroken, and a modder has already shown the console running a custom version of Mario Kart World featuring new playable characters like Cinnamoroll, the red Angry Bird, Peter Griffin, and...
Forrester Blog · · Critical severity
At 14:00 UTC on October 21st, PHP released patches to two critical CVEs, both of which can lead to remote code execution. CVE-2026-109618 addresses an RCE through an out-of-memory error, and CVE-2026-109619 addresses an RCE through a...
BleepingComputer · · Critical severity
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments.
YourStory RSS Feed · · Medium severity
Bengaluru-based digital trust company eMudhra has decided to exit its global SSL/TLS certificate business following a security incident involving weak cryptographic keys that prompted action from Google and Mozilla. In a regulatory...
TechRadar · · Medium severity
Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security. Benedict provides detailed analysis on state-sponsored threat actors, APT...
Malwarebytes Labs · · Medium severity
Facebook’s Cambridge Analytica scandal may feel like very old news . But the consequences are still arriving, and the latest comes with a $25 billion price tag. Reuters reports that a New Mexico judge has ordered Meta to pay $25 billion...
The Record by Recorded Future · · Critical severity
A Chinese government-aligned hacking group used automated tools to carry out the recent supply chain attack on IT management software company ConnectWise and is using the same techniques to try to compromise organizations around the...
The Verge · · Medium severity
Hackers attempted to exploit the PHP flaws impacting sites across the web days before they were patched, according to a report from Amazon Threat Intelligence . CJ Moses, Amazon chief information security officer, writes that the...
TechCrunch · · Medium severity
Microsoft points the blame for ConnectWise's breach at a China-aligned hacker, which relied on AI agents to rapidly hack into thousands of its customers.
Exploit-DB · · Medium severity
PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
Hacker News · · Medium severity
Ubuntu security notices · · Medium severity
It was discovered that OpenVPN incorrectly handled certificate subject fields. A remote authenticated user could possibly use this issue to impersonate other users.
Slashdot · · Critical severity
Trend Micro's Zero Day Initiative appears to have accidentally disclosed several unpatched Linux kernel vulnerabilities on the public LKML instead of the private security list, including two CVSS 9.0 flaws that could enable remote code...
The Verge · · Medium severity
Microsoft CEO Satya Nadella at a hackathon event in 2016. | Image: Microsoft Microsoft is closing down The Garage, a set of popular maker spaces where employees worked on experimental projects and collaborated on surprising new apps and...
AppleInsider · · Medium severity
Attackers are actively exploiting critical PHP flaws to target internet-exposed NAS devices. If your files and backups are stored there, they're probably at risk. TerraMaster Network Attached Storage PHP2Shell refers to two critical...
Cybersecurity Dive - Latest News · · Medium severity
Researchers said the hackers employed a powerful AI tool to accelerate and scale the attacks against hundreds of Microsoft 365 users.
HackRead · · Medium severity
INTERPOL’s Operation Serengeti III targeted cybercrime in 21 African countries, recovering over $105 million and identifying 65,929 victims…
Latest InfoTech News, IT, Information Technology News | The HinduBusinessLine · · Medium severity
Experts urge businesses to patch vulnerable systems amid rising risks of cyberattacks
IT Security Guru · · Medium severity
Cybersecurity company Huntress has expanded its distribution partnership with Ingram Micro into Canada, Latin America and the Caribbean, strengthening its channel presence across the Americas. Building on its existing relationship in...
The Register · · Medium severity
In a world full of cyber risk, account takeover has emerged as one of the most insidious of all threats. If an attacker can successfully compromise a legitimate email account, they are then able to pose as a trusted individual or...
Ubuntu security notices · · Medium severity
It was discovered that Tornado did not properly handle certain HTTP requests and network inputs. An attacker could possibly use these issues to cause a denial of service, expose sensitive information, or bypass access controls....
Malwarebytes Labs · · Medium severity
The warnings are everywhere these days. These messages of caution, however well-intended, are so ubiquitous and constant that it should come as no surprise that some people have started to tune them out. About one in three, according to...
CERT Polska · · Medium severity
W oprogramowaniu MTW CleanShot X wykryto podatność związaną z deserializacją niezaufanych danych (CVE-2026-16477).
DQ : Latest Posts · · Medium severity
Two critical vulnerabilities in the PHP programming language have triggered urgent security warnings, with Palo Alto Networks estimating that approximately 22 million internet-facing instances could be exposed. The flaws, tracked as...
DQ : Latest Posts · · Medium severity
Both are more than news headlines that blew high, and far, in the Internet. They are two sides of the coin which is moving swiftly, deeply and etching new worries (and possibilities) for enterprise security. AI has shown what it can do...
Computerworld · · Medium severity
Private keys associated with eight intermediate certificate authorities operated by Indian digital trust provider eMudhra have been compromised, potentially allowing attackers to forge trusted certificates and impersonate websites or...
IT Security Guru · · Medium severity
Cybersecurity researchers at Forescout are drawing attention to the risks posed by exposed refrigeration control systems, warning that weaknesses in operational technology (OT) could have serious consequences for food supplies, business...
TechCrunch · · Medium severity
The vibe-coding platform said all of its customers should revoke and rotate their private keys, after hackers were able to decrypt some customer secrets.
Infosecurity Magazine · · Medium severity
The EU Commission will assess whether Booking.com has adequately protected customers from phishing attacks
The Record by Recorded Future · · High severity
More than 1,400 suspected cybercriminals were arrested across Africa this summer as part of a crackdown on the gangs perpetrating online fraud, ransomware and business email compromise attacks, Interpol said.
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free