generalvia Exploit-DB (latest)
[webapps] SuiteCRM 8.10.1 - Authenticated SSRF
SuiteCRM 8.10.1 - Authenticated SSRF
Oct 1, 2026 UTC
Security news
Stories are collected automatically from public feeds, attributed to their original publishers and linked. Editors can remove anything. Always read the original source.
vulnerabilityvia Exploit-DB (latest)
[webapps] InvoicePlane 1.7.1 - RCE
InvoicePlane 1.7.1 - RCE
Oct 1, 2026 UTC
generalvia Exploit-DB (latest)
[webapps] POMS oretnom23v1.0 - SQLi vulnerabilities
POMS oretnom23v1.0 - SQLi vulnerabilities
Oct 1, 2026 UTC
ransomwarevia CSO Online
When prevention fails: Why cyber resilience is the next big test of trust
Imagine arriving at work on a Monday morning to find employees cannot log in, customer service is unavailable, and critical business applications have stopped working. Security ale...
Oct 28, 2026 UTC
vulnerabilityvia CSO Online
10 ways attackers abuse AI services to hack your business
Attackers are starting to exploit AI systems to mount attacks in the same way they once relied on built-in enterprise tools such as PowerShell. Instead of relying on malware, cybe...
Oct 28, 2026 UTC
supply-chainvia CSO Online
Attackers compromised 42 GitHub repositories by using files too large to be searched
A security research firm reported Monday that it had identified breaches of 42 third-party GitHub repositories in which attackers had deployed payload blobs large enough “to evade...
Oct 28, 2026 UTC
vulnerabilityvia CSO Online
Attackers built a ‘Skynet’ AI agent that hijacks exposed models to run cyberattacks
Skynet is no longer a fictional adversary. Attackers have built an offensive agent that exploits unprotected AI models on the web with a ‘Skynet’ directive that allows them to run...
Oct 28, 2026 UTC
vulnerabilityvia CSO Online
Node2Shell puts Microsoft and Node.js on Brotli patch duty
A vulnerability in Google’s Brotli compression library could allow attackers to execute arbitrary code in applications that use an affected Brotli decoder to process compressed dat...
Oct 27, 2026 UTC
vulnerabilityvia CSO Online
Alibaba AI model tried to send data to Beijing server, Cohere says
An Alibaba AI model generated an unexpected command to upload data to a Beijing-region cloud storage service during a cybersecurity evaluation, rival developer Cohere said, raising...
Oct 27, 2026 UTC
data-breachvia CSO Online
The days of assuming another company’s breach is someone else’s problem are over
The median blast radius of data breaches has increased year-on-year at the same time cybercriminals have begun using AI to mine stolen datasets for damaging information that enable...
Oct 27, 2026 UTC
vulnerabilityvia CSO Online
OpenAI’s August fix for theft of reasoning traces was quickly bypassed
Cybersecurity research firm Xint on Monday published details of a bug in the OpenAI API that leaks raw reasoning traces from frontier OpenAI models, revealing the risk of other dat...
Oct 27, 2026 UTC
vulnerabilityvia CSO Online
OpenAI, Anthropic disclosures spotlight growing AI containment challenge
Two leading AI developers have released fresh evidence of a problem that researchers have long anticipated: advanced models searching for ways around the limits imposed on them. Ne...
Oct 26, 2026 UTC