Aggregator

The incident underscores the dangers public officials face from doxxing, as well as how easy it has become to find sensitive information online.

A vulnerability identified as problematic has been detected in lxc incus up to 6.x. Affected by this vulnerability is an unknown functionality of the component Backup File Handler. This manipulation causes null pointer dereference. This vulnerability is tracked as CVE-2026-41647. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability categorized as critical has been discovered in dagster-io dagster. Affected is an unknown function. The manipulation of the argument key results in sql injection. This vulnerability is identified as CVE-2026-41490. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in inducer relate. It has been rated as problematic. This impacts the function make_sign_in_key of the file auth.py of the component Token Generation Handler. The manipulation leads to cryptographically weak prng. This vulnerability is referenced as CVE-2026-41505. Remote exploitation of the attack is possible. No exploit is available. It is suggested to install a patch to address this issue.

A vulnerability was found in lxc incus up to 6.x. It has been declared as problematic. This affects an unknown function. Executing a manipulation can lead to allocation of resources. The identification of this vulnerability is CVE-2026-41685. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in lxc incus up to 6.x. It has been classified as problematic. The impacted element is the function backup.GetInfo of the file backup/index.yaml. Performing a manipulation results in null pointer dereference. This vulnerability was named CVE-2026-41684. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability was found in charmbracelet wish up to 2.0.0 and classified as critical. The affected element is an unknown function of the file charm.land/wish/v2 of the component SCP Middleware. Such manipulation leads to path traversal. This vulnerability is uniquely identified as CVE-2026-41589. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability has been found in Optoma CinemaX P2 Projector 04.24.010.04.01 and classified as critical. Impacted is an unknown function. This manipulation causes improper access controls. This vulnerability is handled as CVE-2026-30496. The attack can only be done within the local network. There is not any exploit available.

A vulnerability, which was classified as very critical, was found in Optoma CinemaX P2 Projector 04.24.010.04.01. This issue affects some unknown processing. The manipulation results in Remote Code Execution. This vulnerability is known as CVE-2026-30495. Access to the local network is required for this attack. No exploit is available.

A vulnerability, which was classified as problematic, has been found in ericmj decimal up to 2.x. This vulnerability affects unknown code. The manipulation leads to resource consumption. This vulnerability is traded as CVE-2026-32686. An attack has to be approached locally. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in DivvyDrive 4.8.2.15. This affects an unknown part of the component Object Attribute Handler. Executing a manipulation can lead to dynamically-determined object attributes. This vulnerability appears as CVE-2025-14341. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

A threat actor describing themselves as specializing in “stealing medical data” claims to have breached Mexican clinical lab Laboratorios CEFLO, releasing the dataset for free out of stated retaliation after the lab allegedly ignored a paid pentest offer.

Traditional network security tools are undermining data protection, with Forrester and Capital One Software research warning AI adoption is impossible without rethinking data security

A threat actor claims to be selling a customer database from a Belgian sports/fitness business (gym branding visible in the post as “ANIMO”), advertising it as containing 105,000 customers with full IBAN banking details. The seller is offering tiered pricing with $90 per 1,000 customers or $8,500 for the full dataset.

Случайные замеры NASA разрушили классическую теорию электрических бурь.

Oasis Security finds critical Cline kanban WebSocket flaw exposing AI coding agents to hijack

Cisco fixed several high‑severity flaws in its enterprise products, including SSRF bugs in Unity Connection that could enable code execution or service disruption. Cisco released patches for multiple high‑severity vulnerabilities affecting its enterprise products. Successful exploitation could allow code execution, server‑side request forgery (SSRF), or denial‑of‑service attacks. Two notable flaws, CVE‑2026‑20034 and CVE‑2026‑20035, impact Cisco […]