Aggregator
CVE-2026-29793 | Feathersjs up to 5.0.41 getObjectId data query logic injection (GHSA-p9xr-7p9p-gpqx)
CVE-2026-29792 | Feathersjs up to 5.0.41 OAuth Service improper authentication (GHSA-wg9x-qfgw-pxhj)
CVE-2026-32112 | homeassistant-ai ha-mcp up to 6.x OAuth Endpoint cross site scripting (GHSA-pf93-j98v-25pv)
CVE-2026-32103 | withstudiocms up to 0.4.2 create-reset-link authorization (GHSA-h7vr-cg25-jf8c)
CVE-2026-32106 | withstudiocms up to 0.4.2 createUser Endpoint privileges management (GHSA-wj56-g96r-673q)
CVE-2026-1760 | GNOME SoupServer Persistent Connection request smuggling (EUVD-2026-5105 / Nessus ID 300863)
Nitrogen
You must login to view this content
新能源危机迫使政府重新考虑对化石燃料的依赖
Недоплатили при увольнении. Участник китайской хакерской группы сдал подельников из-за обиды на низкий гонорар
White House pours cold water on cyber ‘letters of marque’ speculation
Ядерный объект, одна ошибка, миллисекунды до трагедии — робот читает ваши мысли и останавливает руку над красной кнопкой
When tax season becomes cyberattack season: Phishing and malware campaigns using tax-related lures
During tax season, threat actors reliably take advantage of the urgency and familiarity of time-sensitive emails, including refund notices, payroll forms, filing reminders, and requests from tax professionals, to push malicious attachments, links, or QR codes.
The post When tax season becomes cyberattack season: Phishing and malware campaigns using tax-related lures appeared first on Microsoft Security Blog.
When tax season becomes cyberattack season: Phishing and malware campaigns using tax-related lures
During tax season, threat actors reliably take advantage of the urgency and familiarity of time-sensitive emails, including refund notices, payroll forms, filing reminders, and requests from tax professionals, to push malicious attachments, links, or QR codes.
The post When tax season becomes cyberattack season: Phishing and malware campaigns using tax-related lures appeared first on Microsoft Security Blog.
[Virtual Event] Shields Up: Key Technologies Reshaping Cybersecurity Defenses
DragonForce
You must login to view this content
Russian hackers exploit Zimbra flaw in Ukrainian govt attacks
Intezer AI SOC removes MDR limits with autonomous triage and optimization
Intezer has expanded capabilities in its AI SOC platform designed for teams who have outgrown their traditional managed detection and response (MDR) services. Internal SOC teams can now focus on supervising outcomes rather than grinding through alerts, with Intezer providing autonomous triage and investigation, continuous optimization for their SIEM and EDR detection rules and expert human support whenever needed. When internal teams lack the capacity to investigate alerts around the clock, they often turn to … More →
The post Intezer AI SOC removes MDR limits with autonomous triage and optimization appeared first on Help Net Security.
Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025-66376
DarkSword: Researchers uncover another iOS exploit kit
A powerful iPhone hacking toolkit dubbed “DarkSword” has been used since November 2025 to compromise devices by exploiting zero-day iOS vulnerabilities, Google researchers have shared. iOS vulnerabilities exploited by DarkSword Two weeks ago, Google Threat Intelligence Group (GTIG) and iVerify disclosed the existence of Coruna, a spy-grade iOS exploit kit that has been used in a commercial surveillance operation, by state-linked threat actors engaged in cyber espionage, and cybercriminals. While Coruna contains five full iOS … More →
The post DarkSword: Researchers uncover another iOS exploit kit appeared first on Help Net Security.