Aggregator

What researchers dubbed the most sophisticated AI-integrated ICS campaign to date hit a brick wall in the form of a SCADA login screen.

When a critical Linux kernel privilege escalation was publicly disclosed, Cloudflare's security and engineering teams detected, investigated, and mitigated the threat across our global fleet, confirming zero customer impact and no malicious exploitation.

UserGate предупредила о росте NFC-атак.

Phone-based scams are evolving faster than most security filters can keep up with. Attackers are now leaning heavily on Voice over Internet Protocol (VoIP) numbers that disappear before detection systems can flag them, leaving users exposed and defenders scrambling. These scam campaigns arrive through email, where attackers embed phone numbers directly into message bodies, subject […]

The post Scammers Use Short-Lived VoIP Numbers and Reuse Windows to Defeat Reputation-Based Blocking appeared first on Cyber Security News.

A sophisticated China-linked hacker group known as UAT-8302 has been quietly targeting government agencies across South America and southeastern Europe, using a mix of custom malware and widely available open-source tools to steal sensitive data. The group has been active since at least late 2024 and stepped up its operations against government bodies in southeastern […]

The post UAT-8302 Uses Custom Malware and Open-Source Tools to Steal Data From Government Agencies appeared first on Cyber Security News.

A vulnerability has been found in MISP up to 2.5.36 and classified as problematic. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2026-8080. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in monetr up to 1.12.4. Affected by this issue is some unknown functionality. Executing a manipulation can lead to information exposure through error message. This vulnerability is handled as CVE-2026-41644. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Tubitak Bilgem Liderahenk up to 2.0.1. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in origin validation error. This vulnerability is known as CVE-2026-6508. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in osrg GoBGP 4.4.0. Affected is the function AdjRib.Update. Such manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2026-42285. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in osrg GoBGP up to 4.2.x. This impacts an unknown function. This manipulation causes improper validation of array index. This vulnerability appears as CVE-2026-41643. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in osrg GoBGP 4.3.0. This affects an unknown function. The manipulation results in null pointer dereference. This vulnerability is reported as CVE-2026-41642. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in GnuTLS. The impacted element is an unknown function of the component RSA-PSK Handler. The manipulation leads to improper authorization. This vulnerability is documented as CVE-2026-42010. The attack can be initiated remotely. There is not any exploit available.

A vulnerability labeled as problematic has been found in OSGeo gdal up to 3.13.0dev-4. The affected element is the function GDfieldinfo of the file frmts/hdf4/hdf-eos/GDapi.c. Executing a manipulation can lead to out-of-bounds read. This vulnerability is registered as CVE-2026-8088. The attack needs to be launched locally. Furthermore, an exploit is available. The affected component should be upgraded.

A vulnerability identified as critical has been detected in OSGeo gdal up to 3.13.0dev-4. Impacted is the function GDnentries of the file frmts/hdf4/hdf-eos/GDapi.c. Performing a manipulation of the argument DataFieldName results in heap-based buffer overflow. This vulnerability is cataloged as CVE-2026-8087. The attack must be initiated from a local position. Furthermore, there is an exploit available. You should upgrade the affected component.

A vulnerability categorized as critical has been discovered in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument DimensionName leads to heap-based buffer overflow. This vulnerability is listed as CVE-2026-8086. The attack must be carried out locally. In addition, an exploit is available. It is advisable to upgrade the affected component.

The agency did not publicly attribute the incidents to a specific group or country but said Poland faced intensified hostile cyber activity in 2024 and 2025, “with particular emphasis on the special services of the Russian Federation.”

Исправить положение дел быстро не выйдет, и на это есть причины.

Submit #808040 / VDB-361841

Submit #808039 / VDB-361840

Submit #808038 / VDB-361839