OESA-2026-3183 perl-DBI security update

The DBI is the standard database interface module for Perl. It defines a set of methods, variables and conventions that provide a consistent database interface independent of the actual database being used. It is important to remember that the DBI is just an interface. The DBI is a layer of "glue...

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running risky commands, and pointed it at Thailand's Ministry of Finance, which runs the country's treasury and tax collection. The agent then worked through the ministry's...

Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

The threat actors behind the Golden Chickens malware-as-a-service MaaS ecosystem have resurfaced with four new malware families, indicating that the operators are showing no signs of stopping despite extensive public disclosures into their inner workings. The malware families in question are:...

Security Bulletin: IBM DevOps Loop has multiple vulnerabilities

Summary IBM DevOps Loop v2.0.2 addresses multiple vulnerabilities. Vulnerability Details CVEID:CVE-2026-42264 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. From version 1.0.0 to before version 1.15.2, fFive config properties auth, baseURL, socketPath,...

GHSA-W7X5-G22V-XQHR vulnerabilities

Vulnerabilities for packages: trino, dependency-track, spark, solr-fips, apache-jena-fuseki, spark-kubernetes-operator-fips, traccar, akhq, spark-kubernetes-operator, spark-fips, neo4j, kafka, jenkins, druid, kafka-fips, strimzi-kafka-operator, apache-hop, solr, reposilite, apache-hop-fips,...

CVE-2026-6790 vulnerabilities

Vulnerabilities for packages: cruise-control, dependency-track, spark, solr-fips, apache-jena-fuseki, cruise-control-fips, spark-kubernetes-operator-fips, traccar, akhq, spark-kubernetes-operator, spark-fips, neo4j, kafka, jenkins, druid, kafka-fips, strimzi-kafka-operator, apache-hop, solr,...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: dependency-track, spark, solr-fips, apache-jena-fuseki, spark-kubernetes-operator-fips, traccar, akhq, spark-kubernetes-operator, spark-fips, neo4j, kafka, jenkins, druid, kafka-fips, strimzi-kafka-operator, apache-hop, solr, reposilite, apache-hop-fips,...

CVE-2026-8384 vulnerabilities

Vulnerabilities for packages: trino, dependency-track, spark, solr-fips, apache-jena-fuseki, spark-kubernetes-operator-fips, traccar, akhq, spark-kubernetes-operator, spark-fips, neo4j, kafka, jenkins, druid, kafka-fips, strimzi-kafka-operator, apache-hop, solr, reposilite, apache-hop-fips,...

CVE-2026-10051 vulnerabilities

Vulnerabilities for packages: dependency-track, spark, solr-fips, apache-jena-fuseki, spark-kubernetes-operator-fips, traccar, akhq, spark-kubernetes-operator, spark-fips, neo4j, kafka, jenkins, druid, kafka-fips, strimzi-kafka-operator, apache-hop, solr, reposilite, apache-hop-fips,...

GHSA-7P3P-8QV8-M2VH vulnerabilities

Vulnerabilities for packages: cruise-control, dependency-track, spark, solr-fips, apache-jena-fuseki, cruise-control-fips, spark-kubernetes-operator-fips, traccar, akhq, spark-kubernetes-operator, spark-fips, neo4j, kafka, jenkins, druid, kafka-fips, strimzi-kafka-operator, apache-hop, solr,...

GHSA-GCJF-9MGH-3P7G vulnerabilities

Vulnerabilities for packages: hadoop-fips, tez, kayenta-fips, wavefront-proxy, airbyte-server, kafbat-ui-fips, elasticsearch, logstash, opensearch, spark, kayenta, kafbat-ui, knative-kafka-broker, apicurio-registry-fips, cloudwatch-exporter, thingsboard, kserve-modelmesh, opensearch-fips,...

GHSA-4MP9-239F-G9HG vulnerabilities

Vulnerabilities for packages: hadoop-fips, tez, kayenta-fips, wavefront-proxy, airbyte-server, kafbat-ui-fips, elasticsearch, logstash, opensearch, spark, kayenta, kafbat-ui, knative-kafka-broker, apicurio-registry-fips, cloudwatch-exporter, thingsboard, kserve-modelmesh, opensearch-fips,...

CVE-2026-59899 vulnerabilities

Vulnerabilities for packages: hadoop-fips, tez, kayenta-fips, wavefront-proxy, airbyte-server, kafbat-ui-fips, elasticsearch, logstash, opensearch, spark, kayenta, kafbat-ui, knative-kafka-broker, apicurio-registry-fips, cloudwatch-exporter, thingsboard, kserve-modelmesh, opensearch-fips,...

CVE-2026-56746 vulnerabilities

Vulnerabilities for packages: hadoop-fips, tez, kayenta-fips, wavefront-proxy, airbyte-server, kafbat-ui-fips, elasticsearch, logstash, opensearch, spark, kayenta, kafbat-ui, knative-kafka-broker, apicurio-registry-fips, cloudwatch-exporter, thingsboard, kserve-modelmesh, opensearch-fips,...

GHSA-6JQX-86GH-F27W vulnerabilities

Vulnerabilities for packages: hadoop-fips, tez, kayenta-fips, wavefront-proxy, airbyte-server, kafbat-ui-fips, elasticsearch, logstash, opensearch, spark, kayenta, kafbat-ui, knative-kafka-broker, apicurio-registry-fips, cloudwatch-exporter, thingsboard, kserve-modelmesh, opensearch-fips,...

CVE-2026-59921 vulnerabilities

Vulnerabilities for packages: hadoop-fips, tez, kayenta-fips, wavefront-proxy, airbyte-server, kafbat-ui-fips, elasticsearch, logstash, opensearch, spark, kayenta, kafbat-ui, knative-kafka-broker, apicurio-registry-fips, cloudwatch-exporter, thingsboard, kserve-modelmesh, opensearch-fips,...

CVE-2026-59900 vulnerabilities

Vulnerabilities for packages: hadoop-fips, kayenta-fips, wavefront-proxy, airbyte-server, kafbat-ui-fips, elasticsearch, opensearch, spark, kayenta, kafbat-ui, knative-kafka-broker, apicurio-registry-fips, cloudwatch-exporter, thingsboard, kserve-modelmesh, opensearch-fips, kafka-bridge-fips,...

CVE-2026-59898 vulnerabilities

Vulnerabilities for packages: hadoop-fips, tez, kayenta-fips, wavefront-proxy, airbyte-server, kafbat-ui-fips, elasticsearch, logstash, opensearch, spark, kayenta, kafbat-ui, knative-kafka-broker, apicurio-registry-fips, cloudwatch-exporter, thingsboard, kserve-modelmesh, opensearch-fips,...

CVE-2026-56745 vulnerabilities

Vulnerabilities for packages: hadoop-fips, tez, kayenta-fips, wavefront-proxy, airbyte-server, kafbat-ui-fips, elasticsearch, logstash, opensearch, spark, kayenta, kafbat-ui, knative-kafka-broker, apicurio-registry-fips, cloudwatch-exporter, thingsboard, kserve-modelmesh, opensearch-fips,...

CVE-2026-55831 vulnerabilities

Vulnerabilities for packages: hadoop-fips, tez, kayenta-fips, wavefront-proxy, airbyte-server, kafbat-ui-fips, elasticsearch, logstash, opensearch, spark, kayenta, kafbat-ui, knative-kafka-broker, apicurio-registry-fips, cloudwatch-exporter, thingsboard, kserve-modelmesh, opensearch-fips,...