-
OpenCode has reported a security breach affecting 1.4% of its Console users, which it attributes to a “large-scale distillation attack.” The company said the affected accounts belong to a subset of users who had connected external providers. However, t…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Federal investigators examining the ShinyHunters group have uncovered potential connections between the extortion group and executives at two ransomware negotiation firms, according to a KrebsOnSecurity investigation published on October 19. Sources fa…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft has issued a warning about the risks posed by AI agents that access enterprise systems, especially when attackers manipulate them through methods like prompt injection, compromised inputs, or shifts in task context. To address this issue, the…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A software supply chain campaign that hijacked AOMEI Technology’s update infrastructure to distribute hidden backdoors. Tracked as UNC7017, the attackers briefly altered server configurations between April and July 2026, then restored legitimate conten…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A threat actor known as Siriusim allegedly leaked customer information and documents related to the State Bank of India (SBI), according to a CyberPulse post dated October 16, 2026. The claim involves 375,000 CSV rows and 2,722 PDF documents; however, …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
San Rafael, United States, October 19th, 2026, CyberNewswire Built on an evolutionary engine first released in 2018, STAR Fuzzer by Bright Security finds crashes, memory exhaustion and memory-safety bugs in security-critical code without a running appl…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A security test of Snowflake-managed PostgreSQL has shown how a database role with limited privileges could be turned into control of the server running the database. Researchers chained several built-in PostgreSQL features to reach operating-system co…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
EG Secure Solutions has warned that a flaw in SiteGuard Server Edition is being exploited and that applying a fix could remove signs of an earlier attack. The issue, CVE-2026-106931, affects the product’s statistics feature, which is enabled by default…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Drupal has warned of a critical remote code execution vulnerability that could let attackers compromise affected websites without logging in. Tracked as CVE-2026-108097, the flaw affects the Field UI module in Drupal core and received a security risk s…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A flaw in Broadcom’s Wi-Fi software can let someone within wireless range take control of vulnerable routers without knowing the Wi-Fi password. The issue affects the company’s implementation of Wi-Fi Protected Setup (WPS), a feature designed to help d…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
