PT-2026-45429

Name of the Vulnerable Software and Affected Versions OpenShift Container Platform affected versions not specified Description A flaw exists where completed pods with restartPolicy: Never are not counted toward ResourceQuota pod limits, and Kubernetes events are not quota-scoped. A non-privileged...

SECUREVENT: Hybrid AI/ML Security Monitoring for Distributed Event-Based Systems

Distributed event-based systems have become a common substrate for Internet-scale publish/subscribe services, IoT telemetry, cloud-native microservices, and security operations pipelines. Their loose coupling and asynchronous delivery improve scalability, but they also expand the attack surface:...

PT-2026-45562

Name of the Vulnerable Software and Affected Versions Nanobot versions prior to 0.2.1 Description A denial of service issue exists in the Matrix channel media download handler. Authenticated room members can exhaust process memory and bandwidth by sending media events that lack or contain invalid...

CVE-2026-10125

creationtimestamp| type| source ---|---|--- 2026-05-30 17:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3joxxx5e2m 2026-05-30 17:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3m2li2nr2n...

CVE-2026-10121

creationtimestamp| type| source ---|---|--- 2026-05-30 17:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3jn3k2yj26 2026-05-30 18:03:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3n6fjhzf2u...

CVE-2026-7465

creationtimestamp| type| source ---|---|--- 2026-05-30 11:33:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn2xf7vhdg2y 2026-05-30 12:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mn2yuja6xu2e 2026-05-30 12:00:32+00:00| seen|...

CVE-2026-47123

creationtimestamp| type| source ---|---|--- 2026-05-29 21:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzglc7zsk2r 2026-05-29 21:37:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzin7xb4n2h...

CVE-2026-10105

creationtimestamp| type| source ---|---|--- 2026-05-29 20:10:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzdsekh3l2s 2026-05-29 22:26:49+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmzlfnbqri2v 2026-05-30 20:01:32+00:00| seen|...

CVE-2026-44596

creationtimestamp| type| source ---|---|--- 2026-05-29 15:00:15+00:00| seen| Telegram/a86W4JR7O--z7UEFDSjPGooPu8cJg6Qw5misZZ2a8xOkaUM 2026-05-29 21:00:04+00:00| seen| Telegram/7EeES1995AuZh7L7sqmaK3TqJ83qHuwNNd4oo-aSS2rD4M 2026-07-17 19:18:06+00:00| seen|...

eventfs: Hold eventfs_mutex and SRCU when remount walks events

...

fanotify: fix false positive on permission events

...

MAECO-Lite: Modular Ontology for Dynamic Malware Analysis

Capturing dynamic malware behavior in a practical but still semantically precise manner remains a significant challenge in cyber threat intelligence. While standards such as MAEC and STIX provide widely adopted vocabularies for describing malware artifacts and observations, they represent data wi...

Linux Distros Unpatched Vulnerability : CVE-2026-46140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btmtk: validate WMT event SKB length before struct access btmtkusbhciwmtsync casts the WMT event response SKB data to struct btmtkhciwmtevt 7 bytes a...

CVE-2026-44797

creationtimestamp| type| source ---|---|--- 2026-05-28 19:02:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwpjcpkqe2r 2026-05-28 20:00:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwsqz5dbl2v 2026-05-29 14:37:06+00:00| seen|...

GHSA-M67G-87RX-V42C Calico Inserts Sensitive Information into Log File

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...

Symfony's Mailtrap Mailer Webhook Parser Never Verifies the X-Mt-Signature HMAC — Unauthenticated Webhook Event Injection

Description The Mailtrap mailer bridge ships a webhook request parser used to authenticate and decode the event callbacks Mailtrap POSTs to an application's webhook endpoint. Its doParseRequest $request, \SensitiveParameter string $secret method receives the configured webhook secret but never...

GHSA-59F3-VP2F-MP9W Symfony's Mailtrap Mailer Webhook Parser Never Verifies the X-Mt-Signature HMAC — Unauthenticated Webhook Event Injection

Description The Mailtrap mailer bridge ships a webhook request parser used to authenticate and decode the event callbacks Mailtrap POSTs to an application's webhook endpoint. Its doParseRequest $request, \SensitiveParameter string $secret method receives the configured webhook secret but never...

CVE-2026-45076

Synapse (open source Matrix homeserver) is affected by CVE-2026-45076. In federated rooms, malicious homeservers can craft room events to prevent full history from being provided to paginating clients, causing clients to fail to display room history. The issue is fixed in Synapse 1.152.1 or later...

CVE-2026-45076 Synapse pagination denial of service

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This...

CVE-2026-45076

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This...