9232 matches found
Friday Squid Blogging: Arctic Bobtail Squid Video
Nice video of the Arctic bobtail squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...
CVE-2026-17626
creationtimestamp| type| source ---|---|--- 2026-08-07 13:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msimra6igd2r...
Bring Your Own EDR: How to Turn a Commercial EDR into a Trojan Horse
...
CVE-2026-13444
creationtimestamp| type| source ---|---|--- 2026-08-06 19:37:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msgs3prfro24...
CVE-2026-33930
creationtimestamp| type| source ---|---|--- 2026-08-06 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msgn2qtzic2r...
Accelerating Enterprise AI from Proof of Concept to Production
Discover how Akamai AI Professional Services helps enterprises bridge the gap from proof of concept to secure, scalable, and manageable production AI...
CVE-2026-10535
creationtimestamp| type| source ---|---|--- 2026-08-06 15:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msgcyvmwba2n...
CVE-2026-58163
creationtimestamp| type| source ---|---|--- 2026-08-06 01:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msevqjbtau23...
Uppsala Security Becomes First Blockchain Intelligence Company to Join Cyber Threat Alliance
SIngapore, Singapore, 5th August 2026, CyberNewswire...
WordPress Netroics Blog Posts Grid plugin <= 1.0 - Authenticated (Editor+) Stored Cross-Site Scripting vulnerability
Authenticated Editor+ Stored Cross-Site Scripting vulnerability discovered by saitamang, syad, yunaranyancat in WordPress Plugin Netroics Blog Posts Grid versions = 1.0...
Iran Cyberattacks Against Minnesota Water Systems
Attribution is preliminary, and so far it seems no real damage. And it seems like this is a campaign that has targeted at least seven states. And, because this is where the US is right now, Trump doesn't believe it's Iran and thinks Minnesota…I guess…hacked itself. "I think I blame it on Minnesot...
admindjango-ckeditor-blog (0.1.0), django-api-commons (>=1.0.0, <=1.0.2) +1 more potentially affected by CVE-2026-15307 via django (1.11.2)
django PYPI version 1.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - admindjango-ckeditor-blog 0.1.0 - django-api-commons =1.0.0, =0.1.0, =0.3.0 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...
admindjango-ckeditor-blog (0.1.0), django-api-commons (>=1.0.0, <=1.0.2) +1 more potentially affected by CVE-2026-15830 via django (1.11.2)
django PYPI version 1.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - admindjango-ckeditor-blog 0.1.0 - django-api-commons =1.0.0, =0.1.0, =0.3.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...
CVE-2026-52521
A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat feature...
CVE-2026-15383
The Blog Floating Button WordPress plugin through 1.4.20 does not sanitize or escape the visitor User-Agent header, which it stores through an unauthenticated tracking REST endpoint and later renders unescaped in an administrator report page. This allows an unauthenticated attacker to store a...
CVE-2026-15383 Blog Floating Button <= 1.4.20 - Unauthenticated Stored XSS via User-Agent Header
The Blog Floating Button WordPress plugin through 1.4.20 does not sanitize or escape the visitor User-Agent header, which it stores through an unauthenticated tracking REST endpoint and later renders unescaped in an administrator report page. This allows an unauthenticated attacker to store a...
CVE-2026-15383
The Blog Floating Button WordPress plugin, version 1.4.20 and below , is vulnerable to unauthenticated stored XSS . The flaw exists because the plugin fails to sanitize or escape the visitor User-Agent header, which is accepted through an unauthenticated tracking REST endpoint. This malicious inp...
EUVD-2026-52174
The Blog Floating Button WordPress plugin through 1.4.20 does not sanitize or escape the visitor User-Agent header, which it stores through an unauthenticated tracking REST endpoint and later renders unescaped in an administrator report page. This allows an unauthenticated attacker to store a...
CVE-2026-15383 Blog Floating Button <= 1.4.20 - Unauthenticated Stored XSS via User-Agent Header
The Blog Floating Button WordPress plugin through 1.4.20 does not sanitize or escape the visitor User-Agent header, which it stores through an unauthenticated tracking REST endpoint and later renders unescaped in an administrator report page. This allows an unauthenticated attacker to store a...