CVE-2026-57279

creationtimestamp| type| source ---|---|--- 2026-08-03 11:24:29+00:00| seen| https://jvn.jp/en/jp/JVN72334274...

CVE-2026-63563

Sharp and Toshiba Tec MFPs multifunction printers for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accesse...

EUVD-2026-52251

Sharp and Toshiba Tec MFPs multifunction printers for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accesse...

CVE-2026-63563

Sharp and Toshiba Tec MFPs shipped for a market with the user authentication feature disabled by default. When used with this initial configuration, address book editing and Document Filing features can be accessed without authentication, potentially exposing sensitive configuration data. The aff...

SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT

The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver BYOVD attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT aka Winos 4.0 for persistent remote access. "In...

CVE-2025-71387

creationtimestamp| type| source ---|---|--- 2026-07-30 04:45:03+00:00| seen| https://jvn.jp/en/vu/JVNVU98815601...

EUVD-2026-47442

Vulnerability in the Oracle HRMS Japanese product of Oracle E-Business Suite component: Oracle Payroll Japanese. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle HRMS...

CVE-2026-61253

Vulnerability in the Oracle HRMS Japanese product of Oracle E-Business Suite component: Oracle Payroll Japanese. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle HRMS...

Transformers Regular Expression Denial of Service (ReDoS) vulnerability

A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationgptneoxjapanese.py of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions...

PYSEC-2026-1984 Transformers Regular Expression Denial of Service (ReDoS) vulnerability

A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationgptneoxjapanese.py of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions...

CVE-2026-24662

creationtimestamp| type| source ---|---|--- 2026-05-14 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN69128376 2026-05-15 07:25:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlusjavsrk2i...

CVE-2026-41281

creationtimestamp| type| source ---|---|--- 2026-05-12 20:00:15+00:00| seen| https://jvn.jp/en/jp/JVN24167657 2026-05-14 02:41:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrs5lypms2v...

CVE-2026-24449

creationtimestamp| type| source ---|---|--- 2026-05-11 22:15:50+00:00| seen| https://jvn.jp/en/jp/JVN94012927...

CVE-2026-42950

creationtimestamp| type| source ---|---|--- 2026-05-11 22:00:00+00:00| seen| https://jvn.jp/en/jp/JVN03037325 2026-05-13 15:37:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlqn3qbbyj2k 2026-06-03 01:22:01+00:00| seen|...

CVE-2026-33566

creationtimestamp| type| source ---|---|--- 2026-04-22 22:00:00+00:00| seen| https://jvn.jp/en/jp/JVN57877356...

CVE-2026-40529

creationtimestamp| type| source ---|---|--- 2026-04-22 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN08026319...

CVE-2026-32955

creationtimestamp| type| source ---|---|--- 2026-04-19 19:30:00+00:00| seen| https://jvn.jp/en/vu/JVNVU94271449 2026-04-20 05:17:09+00:00| seen| Telegram/oT3io0aR7EQyKUnAhTuUuKTmw-PFwRgwwLAn7oSA51QT1kY 2026-04-20 06:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjvs3zrp3e2c...

CVE-2026-32959

creationtimestamp| type| source ---|---|--- 2026-04-19 19:30:00+00:00| seen| https://jvn.jp/en/vu/JVNVU94271449 2026-04-20 06:14:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvsvb6xzq2e 2026-04-21 10:00:00+00:00| seen|...

Friday Squid Blogging: New Giant Squid Video

Pretty fantastic video from Japan of a giant squid eating another squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...

CVE-2026-32929

creationtimestamp| type| source ---|---|--- 2026-04-01 03:30:00+00:00| seen| https://jvn.jp/en/vu/JVNVU90448293/ 2026-04-02 01:00:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihyxszvyp2j 2026-04-02 01:18:28+00:00| seen| Telegram/7rLczVeBBv6SSIB10Z8cqxb4bee2TcHdurxt5OLTZQuJPU...