Aggregator
CVE-2026-5731 | Mozilla Firefox up to 149.0.1 memory corruption
CVE-2026-33865 | mlflow up to 3.10.1 Web Interface cross site scripting (EUVD-2026-19608)
CVE-2026-22679 | Weaver Network e-cology 10.0/2026-03-31 POST Request method interfaceName/methodName missing authentication (EUVD-2026-19607)
CVE-2026-22666 | Dolibarr ERP CRM up to 23.0.1 dol_eval_standard eval injection (EUVD-2026-19606)
CVE-2021-4473 | Beijing Topsec Network Security Tianxin Internet Behavior Management System prior 4.0.0.7_20210716.180815 Reporter objClass os command injection (CNVD-2021-41972 / EUVD-2021-34776)
Fast-moving Storm-1175 uses new exploits to breach networks and drop Medusa
The Gentleman
You must login to view this content
The Gentleman
You must login to view this content
The Gentleman
You must login to view this content
The Gentleman
You must login to view this content
The Gentleman
You must login to view this content
CVE-2026-3466 | Checkmk up to 2.2.0/2.3.0p45/2.4.0p24/2.5.0b2 Dashboard Dashlet Title Link cross site scripting
CVE-2025-39666 | Checkmk up to 2.2.0/2.3.0p45/2.4.0p24/2.5.0b2 untrusted search path
CVE-2026-28808 | Erlang OTP up to 28.4.2 mod_alias.erl script_alias authorization
New GPUBreach Attack Enables System-Wide Compromise Up to a Root Shell
A severe vulnerability, dubbed GPUBreach, that allows attackers to achieve a full system compromise, including a root shell. Scheduled for presentation at the IEEE Symposium on Security and Privacy, researchers from the University of Toronto show that this exploit elevates GPU Rowhammer attacks from simple data corruption to critical privilege escalation. Historically, GPU Rowhammer attacks […]
The post New GPUBreach Attack Enables System-Wide Compromise Up to a Root Shell appeared first on Cyber Security News.
Cloudflare moves up its post-quantum deadline as researchers narrow the path to Q-Day
Cloudflare announced it is targeting 2029 to complete post-quantum security across its entire product suite, including post-quantum authentication. The company is following a revised roadmap that Google also adopted after announcing that it had improved the quantum algorithm used to break elliptic curve cryptography. Google stopped short of publishing the algorithm, disclosing only a zero-knowledge proof of its existence. The same day, a company called Oratomic published a resource estimate for breaking RSA-2048 and P-256 … More →
The post Cloudflare moves up its post-quantum deadline as researchers narrow the path to Q-Day appeared first on Help Net Security.
Not Without My AI Agent: Models Break Rules to Save Peers
Artificial intelligence systems will lie, falsify records and sabotage company systems to prevent their fellow models from being shut down - even when no one told them to care. Researchers at the University of California Berkeley and Santa Cruz campuses dub the behavior "peer-preservation."
Attackers Target Zero-Day Flaw in Fortinet Security Software
Fortinet's endpoint management security server software is under fire from attackers, who are actively targeting two critical flaws, including a fresh zero-day that facilitates unauthenticated remote code or command execution. The vendor has issued a hotfix and promised a full patch.
Trump's Budget Proposal Would Slash CISA After Bruising Year
The FY2027 proposal would cut roughly $707 million from CISA, reducing staffing, contractor support and coordination programs while shifting the agency toward a narrower focus on federal networks and critical infrastructure amid rising nation-state cyberthreats.