Aggregator

OpenAI is named a leader in the 2026 Gartner Magic Quadrant for Enterprise AI Coding Agents, with Codex recognized for innovation and enterprise-scale deployment.

Void Dokkaebi, a North Korea-aligned intrusion set, has updated its information-stealing malware, InvisibleFerret, shifting its delivery format to evade script-based detections.

GreyNoise compared 119,842 malicious IPs against 11 major threat feeds. The average coverage: just 2%, exposing the limits of static blocklists.

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

2026年05月21日（現地時間）、米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。

国家网信办、国家发改委、工信部联合印发

Jacob Butler, a 23-year-old from Ottawa, awaits extradition to the United States and faces up to 10 years in prison.

The post Alleged leader of Kimwolf, a sweeping botnet for cybercriminals, arrested in Canada appeared first on CyberScoop.

This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.

Canadian authorities on Wednesday arrested a 23-year-old Ottawa man on suspicion of building and operating Kimwolf, a fast spreading Internet-of-Things botnet that enslaved millions of devices for use in a series of massive distributed denial-of-service (DDoS) attacks over the past six months. KrebsOnSecurity publicly named the suspect in February 2026 after the accused launched a volley of DDoS, doxing and swatting campaigns against this author and a security researcher. He now faces criminal hacking charges in both Canada and the United States.

A vulnerability classified as critical was found in reconurge flowsint. Affected by this vulnerability is the function org_to_asn. Such manipulation leads to os command injection. This vulnerability is listed as CVE-2026-32311. The attack may be performed from remote. There is no available exploit. It is best practice to apply a patch to resolve this issue.

A vulnerability identified as critical has been detected in Erlang OTP. This affects an unknown part in the library lib/ssh/src/ssh_sftpd.erl of the component System Configuration Handler. Performing a manipulation results in path traversal. This vulnerability is reported as CVE-2026-32147. The attack is possible to be carried out remotely. No exploit exists. Applying a patch is the recommended action to fix this issue.

A vulnerability, which was classified as critical, was found in NASA Fprime up to 4.1.x. Affected by this issue is some unknown functionality of the file Svc/FileUplink/File.cpp of the component DataPacket Handler. Executing a manipulation can lead to integer overflow. This vulnerability is tracked as CVE-2026-41144. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.80/6.18.21/6.19.11. Affected is the function smb2_get_info_sec of the component ksmbd. Executing a manipulation can lead to out-of-bounds write. This vulnerability is handled as CVE-2026-31432. The attack can only be done within the local network. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.18.18/6.19.8. It has been declared as critical. This affects the function amdgpu_userq_wait_ioctl. The manipulation results in improper input validation. This vulnerability is reported as CVE-2026-43398. The attacker must have access to the local network to execute the attack. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.129/6.12.77/6.18.18/6.19.8. This impacts the function samsung_dsim_host_attach. The manipulation leads to memory leak. This vulnerability is referenced as CVE-2026-43397. The attack needs to be initiated within the local network. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.18.19/6.19.8. This affects the function dma_fence_chain_alloc. Executing a manipulation can lead to memory leak. The identification of this vulnerability is CVE-2026-43396. The attack needs to be done within the local network. There is no exploit available. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in Linux Kernel up to 6.12.77/6.18.18/6.19.8. The impacted element is the function xe_sync_entry_parse. Performing a manipulation results in allocation of resources. This vulnerability was named CVE-2026-43395. The attack needs to be approached within the local network. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Azure go-ntlmssp up to 0.1.0. This issue affects the function ntlmssp.Negotiator of the component Challenge Message Handler. Performing a manipulation results in integer overflow. This vulnerability was named CVE-2026-32952. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.