Aggregator

Progress Software warned customers to patch a critical authentication bypass vulnerability in its MOVEit Automation enterprise-grade managed file transfer (MFT) application. [...]

Security breaches don't just test your defenses—they test your recovery. Join Kaseya in our upcoming webinar to learn how MSPs strengthen resilience with SaaS backups and BCDR to stay operational after attacks. [...]

A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.135/6.12.83/6.18.24/7.0.1. Affected is the function __sev_do_cmd_locked of the component crypto. Performing a manipulation results in memory corruption. This vulnerability is cataloged as CVE-2026-31697. The attack must originate from the local network. There is no exploit available. You should upgrade the affected component.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.6.135/6.12.83/6.18.24/7.0.1. Affected by this vulnerability is the function __sev_do_cmd_locked of the component crypto. Executing a manipulation can lead to memory corruption. This vulnerability is registered as CVE-2026-31698. The attack requires access to the local network. No exploit is available. The affected component should be upgraded.

A vulnerability classified as critical was found in Linux Kernel up to 6.6.135/6.12.83/6.18.24/7.0.1. This issue affects the function fuse_add_dirent_to_cache. Such manipulation of the argument namelen leads to deserialization. This vulnerability is traded as CVE-2026-31694. Access to the local network is required for this attack to succeed. There is no exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Bitwarden CLI 2026.4.0. This affects an unknown part. Performing a manipulation results in os command injection. This vulnerability is reported as CVE-2026-42994. The attack is possible to be carried out remotely. No exploit exists.

Чем опасна самостоятельность ИИ.

Team Cymru’s Stephen Campbell warned that small US defense contractors are not well prepared to face cyber intrusions through edge devices

Happy National Small Business Week! For over 60 years, the U.S. Small Business Administration has led this initiative to acknowledge the critical contributions of America’s entrepreneurs and small business owners. Part of the U.S. Department of Commerce, NIST’s mission is to drive U.S. innovation and global competitiveness, and the small business community is central to this mission. In this year’s blog, we shine a spotlight on some new and upcoming NIST resources that are all focused on strengthening the cybersecurity and resilience of the nation’s small business community. Build Your Small

On December 4, 2025, a 17-year-old was arrested in Osaka under Japan’s Unauthorized Access Prohibition Act. The young man had run malicious code to extract the personal data of over 7 million users of Kaikatsu Club, Japan's largest internet cafe chain. When asked, the young man shared his motivation for the hack: he wanted to buy Pokémon cards. In a sense, this is a fairly conventional story.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Linux kernel zero-day vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning federal agencies and organizations worldwide to patch immediately or discontinue use of affected systems. Tracked as CVE-2026-31431 and dubbed “Copy Fail”, the flaw carries a CVSS score of 7.8 (High) and […]

The post CISA Warns of Linux “Copy Fail” 0-Day Vulnerability Exploited to Root Systems appeared first on Cyber Security News.

A vulnerability was found in Apache Atlas up to 2.3.x and classified as critical. This impacts an unknown function. Executing a manipulation can lead to code injection. This vulnerability is tracked as CVE-2026-40563. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

The China-based cybercrime group known as Silver Fox (aka Monarch, SwimSnake, The Great Thief of Valley, UTG-Q-1000, and Void Arachne) has been linked to a new campaign targeting organizations in Russia and India with a new malware called ABCDoor. The activity involved using phishing emails that mimic correspondence from the Income Tax Department of India in December 2025, followed by a similar

A vulnerability has been found in GnuTLS and classified as problematic. This affects the function merge_handshake_packet of the component DTLS Handshake Fragment Reassembly Handler. Performing a manipulation of the argument message_length results in improper handling of length parameter inconsistency. This vulnerability is identified as CVE-2026-33846. The attack can be initiated remotely. There is not any exploit available.