643 matches found
CVE-2026-21353
creationtimestamp| type| source ---|---|--- 2026-02-11 07:27:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mekxb7dvga2x 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260602 2026-06-02 20:00:00+00:00| seen|...
The First 90 Seconds: How Early Decisions Shape Incident Response Investigations
Many incident response failures do not come from a lack of tools, intelligence, or technical skills. They come from what happens immediately after detection, when pressure is high, and information is incomplete. I have seen IR teams recover from sophisticated intrusions with limited telemetry. I...
Top 10 Cloud Compliance Tools for Enterprise Security and Audit Readiness in 2026
Key Takeaways Cloud compliance has shifted from periodic audits to a continuous operating requirement as hybrid and multi-cloud environments change faster than traditional controls can keep pace. Modern cloud compliance solutions provide continuous, automated compliance monitoring across AWS,...
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume th...
LLM-Assisted Authentication and Fraud Detection
User authentication and fraud detection face growing challenges as digital systems expand and adversaries adopt increasingly sophisticated tactics. Traditional knowledge-based authentication remains rigid, requiring exact word-for-word string matches that fail to accommodate natural human memory...
CVE-2026-22809
creationtimestamp| type| source ---|---|--- 2026-01-24 21:25:12+00:00| seen| https://gist.github.com/alon710/9d9c15020305bb7e2d3e52c842759649 2026-01-24 22:40:42+00:00| seen| https://gist.github.com/alon710/9abd26d07048f88e13b0eccb19e938c5...
Toward Risk Thresholds for AI-Enabled Cyber Threats: Enhancing Decision-Making under Uncertainty with Bayesian Networks
Artificial intelligence AI is increasingly being used to augment and automate cyber operations, altering the scale, speed, and accessibility of malicious activity. These shifts raise urgent questions about when AI systems introduce unacceptable or intolerable cyber risk, and how risk thresholds...
CVE-2026-21935
creationtimestamp| type| source ---|---|--- 2026-01-21 08:25:40+00:00| seen| https://gist.github.com/Darkcrai86/a839540dac95d8d3cb432a6cbbb99e01 2026-01-21 16:25:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcx3jlklw62o 2026-01-21 21:18:16+00:00| seen|...
RansomHouse Claims Data Breach at Major Apple Contractor Luxshare
RansomHouse claims to have breached Apple contractor Luxshare, but no evidence has been released. Links are offline and the breach remains unverified...
Holmes: An Evidence-Grounded LLM Agent for Auditable DDoS Investigation in Cloud Networks
Cloud environments face frequent DDoS threats due to centralized resources and broad attack surfaces. Modern cloud-native DDoS attacks further evolve rapidly and often blend multi-vector strategies, creating an operational dilemma: defenders need wire-speed monitoring while also requiring...
CVE-2023-7334
Changjetong T+ versions up to and including 16.x contain a .NET deserialization vulnerability in an AjaxPro endpoint that can lead to remote code execution. A remote attacker can send a crafted request to /tplus/ajaxpro/Ufida.T.CodeBehind.PriorityLevel,AppCode.ashx?method=GetStoreWarehouseByStore...
CVE-2023-7334 Changjetong T+ <= 16.x GetStoreWarehouseByStore Deserialization RCE
Changjetong T+ versions up to and including 16.x contain a .NET deserialization vulnerability in an AjaxPro endpoint that can lead to remote code execution. A remote attacker can send a crafted request to /tplus/ajaxpro/Ufida.T.CodeBehind.PriorityLevel,AppCode.ashx?method=GetStoreWarehouseByStore...
CVE-2025-36934
creationtimestamp| type| source ---|---|--- 2026-01-14 16:59:00+00:00| seen| https://projectzero.google/2026/01/pixel-0-click-part-1.html 2026-01-14 17:01:00+00:00| seen| https://projectzero.google/2026/01/pixel-0-click-part-3.html 2026-01-15 18:57:32+00:00| seen|...
CVE-2026-0822
creationtimestamp| type| source ---|---|--- 2026-01-10 15:00:50+00:00| published-proof-of-concept| Telegram/51hy6eeB0OX5Oi4WYV6NJVEVeitRj2FXamGCe71U1ruORGw 2026-01-10 17:44:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc3kswznff2e...
Cybersecurity Predictions 2026: The Hype We Can Ignore (And the Risks We Can't)
As organizations plan for 2026, cybersecurity predictions are everywhere. Yet many strategies are still shaped by headlines and speculation rather than evidence. The real challenge isn't a lack of forecasts—it's identifying which predictions reflect real, emerging risks and which can safely be...
CVE-2025-14110
creationtimestamp| type| source ---|---|--- 2026-01-07 11:22:38+00:00| seen| https://gist.github.com/Darkcrai86/4a0534d4c587c81eecba37535b29d41c...
CVE-2026-0625 D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint
Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access control vulnerability in the dnscfg.cgi endpoint that allows an unauthenticated attacker to access DNS configuration functionality. By directly requesting this endpoint, an attacker can modify the device’s DN...
Integrating Multi-Agent Simulation, Behavioral Forensics, and Trust-Aware Machine Learning for Adaptive Insider Threat Detection
We present a hybrid framework for adaptive insider-threat detection that tightly integrates multi-agent simulation MAS, layered Security Information and Event Management SIEM correlation, behavioral and communication forensics, trust-aware machine learning, and Theory-of-Mind ToM reasoning...
GHSA-5J4H-4F72-QPM6 Bagisto has Normal & Blind SSTI from low-privilege user when ordering product
Summary SSTI when normal customer orders any product in add address step can inject value run in admin view. Details As normal user 1. Go to http://127.0.0.1:8000/ 2. Add order to cart and continue to checkout 3. In step of add address inject this value 77 in any input As admin 1. Go to...
