Payload
You must login to view this content
Aggregator
Top product launches at RSAC 2026
3 days 10 hours ago
RSAC 2026 showcased a wave of innovation, with vendors unveiling technologies poised to redefine cybersecurity. From AI-powered defense to breakthroughs in identity protection, this year’s conference delivered a glimpse into the future. Here are the most interesting products that caught our attention, and could shape what’s next. Astrix advances AI agent security platform to govern shadow and enterprise agents Astrix Security has revealed a major expansion of its AI agent security platform, covering every layer … More →
The post Top product launches at RSAC 2026 appeared first on Help Net Security.
Mirko Zorz
Tails 7.6 ships automatic Tor bridge retrieval and a new password manager
3 days 11 hours ago
Tails 7.6 is out, and for users operating on networks that block Tor, the most consequential addition is built-in bridge retrieval. The Tor Connection assistant can now detect when a direct connection to Tor is restricted and automatically request bridges suited to the user’s region. The request goes through the Tor Project’s Moat API, and the connection to that API is disguised via domain fronting, making it appear as traffic to an ordinary website. Previously, … More →
The post Tails 7.6 ships automatic Tor bridge retrieval and a new password manager appeared first on Help Net Security.
Anamarija Pogorelec
University of North Georgia Triumphs in DOD Hacking Contest
3 days 11 hours ago
The Mission: Hack High Value Targets' Devices, Apps and Transmit His Location
A team of cybersecurity students from the University of North Georgia vanquished seven opposing teams from other senior military colleges and elite service academies in an upset victory to win a capture the flag hacking contest staged this week at the National Defense University here.
A team of cybersecurity students from the University of North Georgia vanquished seven opposing teams from other senior military colleges and elite service academies in an upset victory to win a capture the flag hacking contest staged this week at the National Defense University here.
NYC Health Notifying Patients of 2 Third-Party Hacks
3 days 11 hours ago
Incidents Are Unrelated, Says NYC Health + Hospitals
Hackers had access to New York City's municipal healthcare system for nearly three months before being detected, stealing data of an undisclosed number of patients. The incident is the second hacking-related data breach within weeks involving a third-party firm hired by NYC Health + Hospitals.
Hackers had access to New York City's municipal healthcare system for nearly three months before being detected, stealing data of an undisclosed number of patients. The incident is the second hacking-related data breach within weeks involving a third-party firm hired by NYC Health + Hospitals.
Breach Roundup: Tycoon2FA Phishing Platform Rebounds
3 days 11 hours ago
Also, Russian Signal Phishing, Iran-Linked Malware, Breaches in Spain and France
This week, Tycoon 2FA, Trio-Tech, messaging app spying and a ransomware broker sentenced. Iran-linked hackers. Mazda disclosed a breach. Oracle patched a flaw. North Korean actors weaponized VS Code, a Spanish port ransomware attack, a French teacher data breach and a healthcare firm victim surge.
This week, Tycoon 2FA, Trio-Tech, messaging app spying and a ransomware broker sentenced. Iran-linked hackers. Mazda disclosed a breach. Oracle patched a flaw. North Korean actors weaponized VS Code, a Spanish port ransomware attack, a French teacher data breach and a healthcare firm victim surge.
Pentagon Piloting Skills-Based Assessments for Cyber Workers
3 days 11 hours ago
Proponents Favor Performance Tests Over Certs
The U.S. Department of Defense is for the first time piloting new skills-based assessments for its cyber hiring as an alternative to checking paper qualifications. Many certificates, officials say, don't reflect the skills their cyber teams need in the real world.
The U.S. Department of Defense is for the first time piloting new skills-based assessments for its cyber hiring as an alternative to checking paper qualifications. Many certificates, officials say, don't reflect the skills their cyber teams need in the real world.
CVE-2026-33140 | ParzivalHack PySpector up to 0.1.6 HTML Report eval HTML injection (GHSA-2gmv-2r3v-jxj2)
3 days 11 hours ago
A vulnerability labeled as problematic has been found in ParzivalHack PySpector up to 0.1.6. The affected element is the function eval of the component HTML Report Handler. Executing a manipulation can lead to HTML injection.
This vulnerability appears as CVE-2026-33140. The attack may be performed from remote. There is no available exploit.
The affected component should be upgraded.
vuldb.com
CVE-2025-63260 | SyncFusion 30.1.37 Document-Editor cross site scripting (EUVD-2025-208909)
3 days 11 hours ago
A vulnerability was found in SyncFusion 30.1.37 and classified as problematic. This vulnerability affects unknown code of the component Document-Editor. The manipulation results in cross site scripting.
This vulnerability is identified as CVE-2025-63260. The attack can be executed remotely. There is not any exploit available.
vuldb.com
CVE-2026-33126 | blakeblackshear frigate up to 0.16.2 HTTP Request /ffprobe server-side request forgery (GHSA-j6g3-3j3q-c2xv / EUVD-2026-13772)
3 days 11 hours ago
A vulnerability classified as critical has been found in blakeblackshear frigate up to 0.16.2. This impacts an unknown function of the file /ffprobe of the component HTTP Request Handler. This manipulation causes server-side request forgery.
This vulnerability is handled as CVE-2026-33126. The attack can be initiated remotely. There is not any exploit available.
It is recommended to upgrade the affected component.
vuldb.com
ODNI tackles AI, threat hunting, app cybersecurity in year-one tech review
3 days 11 hours ago
It’s the first significant cybersecurity-related announcement under Director of National Intelligence Tulsi Gabbard.
The post ODNI tackles AI, threat hunting, app cybersecurity in year-one tech review appeared first on CyberScoop.
Tim Starks
CVE-2026-4716 | Mozilla Firefox up to 148 JavaScript Engine uninitialized pointer (Nessus ID 303809)
3 days 11 hours ago
A vulnerability, which was classified as problematic, was found in Mozilla Firefox up to 148. Affected by this issue is some unknown functionality of the component JavaScript Engine. Such manipulation leads to uninitialized pointer.
This vulnerability is referenced as CVE-2026-4716. It is possible to launch the attack remotely. No exploit is available.
You should upgrade the affected component.
vuldb.com
CVE-2026-4698 | Mozilla Firefox up to 148 JIT (Nessus ID 303809)
3 days 11 hours ago
A vulnerability classified as problematic has been found in Mozilla Firefox up to 148. This vulnerability affects unknown code of the component JIT. This manipulation causes an unknown weakness.
The identification of this vulnerability is CVE-2026-4698. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2026-4695 | Mozilla Firefox up to 148 Web Codecs memory corruption (Nessus ID 303809)
3 days 11 hours ago
A vulnerability marked as critical has been reported in Mozilla Firefox up to 148. This issue affects some unknown processing of the component Web Codecs. This manipulation causes memory corruption.
This vulnerability is handled as CVE-2026-4695. The attack can be initiated remotely. There is not any exploit available.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2026-4701 | Mozilla Firefox up to 148 JavaScript Engine use after free (Nessus ID 303809)
3 days 11 hours ago
A vulnerability, which was classified as critical, was found in Mozilla Firefox up to 148. This impacts an unknown function of the component JavaScript Engine. The manipulation results in use after free.
This vulnerability is identified as CVE-2026-4701. The attack can be executed remotely. There is not any exploit available.
You should upgrade the affected component.
vuldb.com
CVE-2026-33216 | nats-io nats-server up to 2.11.14/2.12.5 MQTT Password cleartext transmission (Nessus ID 303825)
3 days 11 hours ago
A vulnerability was found in nats-io nats-server up to 2.11.14/2.12.5 and classified as problematic. The impacted element is an unknown function of the component MQTT Password Handler. The manipulation results in cleartext transmission of sensitive information.
This vulnerability is identified as CVE-2026-33216. The attack can be executed remotely. There is not any exploit available.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2026-33218 | nats-io nats-server up to 2.11.14/2.12.5 leafnode denial of service (Nessus ID 303824)
3 days 11 hours ago
A vulnerability was found in nats-io nats-server up to 2.11.14/2.12.5. It has been classified as problematic. This affects an unknown function of the component leafnode Handler. This manipulation causes denial of service.
This vulnerability is tracked as CVE-2026-33218. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is recommended.
vuldb.com
CVE-2026-33223 | nats-io nats-server up to 2.11.14/2.12.5 Nats-Request-Info Header authentication spoofing (Nessus ID 303827)
3 days 11 hours ago
A vulnerability was found in nats-io nats-server up to 2.11.14/2.12.5. It has been rated as critical. Affected is an unknown function of the component Nats-Request-Info Header Handler. Performing a manipulation results in authentication bypass by spoofing.
This vulnerability is cataloged as CVE-2026-33223. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is advised.
vuldb.com
CVE-2026-27889 | nats-io nats-server WebSocket Frame wsRead integer overflow (Nessus ID 303826)
3 days 11 hours ago
A vulnerability categorized as problematic has been discovered in nats-io nats-server. The affected element is the function wsRead of the component WebSocket Frame Handler. Such manipulation leads to integer overflow.
This vulnerability is referenced as CVE-2026-27889. It is possible to launch the attack remotely. No exploit is available.
It is advisable to upgrade the affected component.
vuldb.com
CVE-2026-23301 | Linux Kernel up to 6.19.6/7.0-rc2 ASoC find_sdca_entity_iot allocation of resources (Nessus ID 303828 / WID-SEC-2026-0861)
3 days 11 hours ago
A vulnerability labeled as critical has been found in Linux Kernel up to 6.19.6/7.0-rc2. The affected element is the function find_sdca_entity_iot of the component ASoC. Executing a manipulation can lead to allocation of resources.
This vulnerability is tracked as CVE-2026-23301. The attack is only possible within the local network. No exploit exists.
The affected component should be upgraded.
vuldb.com