CVE-2026-85538

CVE-2026-85538 is an incorrect authorization vulnerability in MISP , where attribute deletion paths in MispAttribute::deleteAttribute() relied solely on organization membership checks without enforcing MISP's ACL::canModifyEvent() authorization logic. An authenticated user with organization membe...

CVE-2026-85538 MISP Attribute Deletion Authorization Bypass Allows Users Without Modify Permissions to Delete Attributes

An incorrect authorization vulnerability in MISP allowed authenticated users to delete attributes from events despite lacking the required permmodify or permmodifyorg permissions. The affected attribute deletion paths relied on organization membership checks performed by...

CVE-2026-85538 MISP Attribute Deletion Authorization Bypass Allows Users Without Modify Permissions to Delete Attributes

An incorrect authorization vulnerability in MISP allowed authenticated users to delete attributes from events despite lacking the required permmodify or permmodifyorg permissions. The affected attribute deletion paths relied on organization membership checks performed by...

CVE-2026-85538 MISP Attribute Deletion Authorization Bypass Allows Users Without Modify Permissions to Delete Attributes

An incorrect authorization vulnerability in MISP allowed authenticated users to delete attributes from events despite lacking the required permmodify or permmodifyorg permissions. The affected attribute deletion paths relied on organization membership checks performed by...

A SoK for SoCs: Reading the TI Leaves on AI for Cyber Threat Intelligence Generation and Sharing

Cyber Threat Intelligence CTI is essential for defending mission-critical infrastructure, yet the process of transforming raw attack evidence into shareable CTI remains fragmented and understudied. We conduct a literature survey of academic papers, organizing the CTI lifecycle into three stages:...

awesome-soc — Updated!

Awesome SOC An operational handbook and knowledge base to build, run and mature a SOC including CSIRT. Covering: SOC basics detection engineering threat intelligence SOC metrics/KPI SOC automation AI use cases and best practices SOP SOC playbooks Those are my view, based on my own experience as...

CVE-2026-77761

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and STIX 2 parser components maintained...

CVE-2026-77761

misp-stix is a Python library for converting STIX documents to MISP events. A parser state isolation flaw allows per-document state (galaxies, galaxy clusters, passive DNS records, references, package titles, dates, and timestamps) to persist across conversions when the same parser instance is re...

CVE-2026-76641

creationtimestamp| type| source ---|---|--- 2026-08-20 19:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjwlayjy62r 2026-09-01 00:01:22+00:00| seen| https://bsky.app/profile/slackers.it/post/3mug4jap4or2n...

MINI-95R3-QMJW-6R49

Bulletin has no description...

CVE-2026-71864

creationtimestamp| type| source ---|---|--- 2026-08-19 20:10:14+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthjyw5mu625 2026-08-20 00:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthwtxsbkf24 2026-09-03 20:35:35+00:00| published-proof-of-concept|...

CVE-2026-53958

creationtimestamp| type| source ---|---|--- 2026-08-18 23:01:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtfd4xzxxc2m...

CVE-2026-19967

creationtimestamp| type| source ---|---|--- 2026-08-17 19:34:07+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtch2i3rf52t...

GHSA-XV5J-CWGJ-22R4

creationtimestamp| type| source ---|---|--- 2026-08-17 14:28:13+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mtbvxiltgl2e 2026-08-17 14:54:30+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3mtbxginal224 2026-08-22 22:00:04+00:00| published-proof-of-concept...

CVE-2026-19957

creationtimestamp| type| source ---|---|--- 2026-08-16 22:54:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cms5luh2p4cjg...

CVE-2026-16099

creationtimestamp| type| source ---|---|--- 2026-08-16 06:01:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt6j6jaucq2z...

Why API Discovery Is Critical for Modern AppSec Programs

Hidden API Estate And AI-speed Recon Are Reshaping Modern Application Risk Key Takeaways Unknown APIs create unattributed exposure , and such exposure rarely gets tested. Attackers build their own inventory through live reconnaissance; they do not wait for your spreadsheet. API discovery must pul...

CVE-2026-58230

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:42+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-70345

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:47+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:18:31+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:44+00:00| seen|...

CVE-2026-70325

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:24+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:19+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:20+00:00| seen|...