Editors' Pick 

Chrome 156

Geronimo

A Google 2026. október 20-án kiadta a Chrome 156-os verzióját, amely a közzétett beszámolók szerint 353 biztonsági hibát javít. A

Editors' Pick 

PAN-OS: kihasznált GlobalProtect

Geronimo

A Palo Alto Networks Unit 42 október 20-án frissített elemzése szerint több zsarolóvírus-csoport is aktívan kihasználja a PAN-OS operációs rendszer CVE-2026-0257 azonosítójú

Editors' Pick 

Signal: aktív maradhatott a mikrofon

Geronimo

A Signal titkosított üzenetküldő alkalmazás híváskezelő komponensében kritikus sérülékenységet azonosítottak. A CVE-2026-113380 jelű, 9,3-as CVSS-besorolású hiba a RingRTC könyvtár 2.72.0 előtti verzióit

Oracle Patchday

Geronimo

Betiltott DeepSeek

Geronimo

PHP2Shell

Geronimo

Orosz kiberkémek egy hadihajógyártó hálózatában

Geronimo

Célpontban Ukrajna állami adatcsere-rendszere

Geronimo

Bronze Sandcastle kampányok

Geronimo

FortiSIEM: kritikus RCE

Geronimo

Irán háborús kibertevékenysége

Geronimo

Nikkei: egy hónapban három incidens 

Geronimo

ConnectWise: leállított felhőszolgáltatások

Geronimo

Digital forensics gap analysis

Geronimo

Cairn-penelek kihasználása

Geronimo

News

PHP2Shell – quick mitigation pre-patch

Yanac

submitted by /u/vjeuss [link] [comments]Technical Information Security Content & DiscussionRead More

Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group

Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group

Yanac
Does the iPhone Duo Run Hot? Here’s What Reviews Found

Does the iPhone Duo Run Hot? Here’s What Reviews Found

Yanac
Meta to create a new class of shares to fund AI push

Meta to create a new class of shares to fund AI push

Yanac
Russian Satellite Makes a Close Approach To A Commercial Radar Satellite Used by Ukraine

Russian Satellite Makes a Close Approach To A Commercial Radar Satellite Used by Ukraine

Yanac
Enterprises keep buying software upgrades that IT thinks will make things worse

Enterprises keep buying software upgrades that IT thinks will make things worse

Yanac
Japan’s Onamae Desktop Cloud hacked, up to 27,000 servers affected

Japan’s Onamae Desktop Cloud hacked, up to 27,000 servers affected

Yanac

PHP2Shell (CVE-2026-109618/109619): first exploit requests arrived 5.5 hours before PHP shipped the fix, and the “scanners” carry Mirai-style loaders

Yanac

Kiberbiztonsági hírek

Vendors' news

HIPAA Security Rule Delayed to 2027: Why Healthcare Can’t Wait 

Yanac
AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise 

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise 

Yanac

Critical Remote Code Execution Vulnerabilities in PHP Core 

Yanac
PHP2Shell: How to Protect Your Server | Kaspersky official blog 

PHP2Shell: How to Protect Your Server | Kaspersky official blog 

Yanac
PSA: PHP Security Updates Available for Two Critical Vulnerabilities, Update Now 

PSA: PHP Security Updates Available for Two Critical Vulnerabilities, Update Now 

Yanac

Life with the Penguin

How to lower Android™ development costs by removing hardware from the critical path

How to lower Android™ development costs by removing hardware from the critical path

Yanac
eMudhra CA compromise fixes available

eMudhra CA compromise fixes available

Yanac
php2shell (CVE-2026-109618 and CVE-2026-109619) – PHP critical vulnerability fixes available

php2shell (CVE-2026-109618 and CVE-2026-109619) – PHP critical vulnerability fixes available

Yanac
Phala Attack Shows What Confidential Computing Does Not Protect

Phala Attack Shows What Confidential Computing Does Not Protect

Yanac
AI Code Review Produces 28 Accepted Security Findings in Apache Camel

AI Code Review Produces 28 Accepted Security Findings in Apache Camel

Yanac

Check this out

BEC protection gap: Why orgs overestimate their protection

BEC protection gap: Why orgs overestimate their protection

Yanac
Spain, Denmark and the Netherlands win Europol 2026 Excellence Awards in Innovation

Spain, Denmark and the Netherlands win Europol 2026 Excellence Awards in Innovation

Yanac
EU law enforcement chiefs gather to discuss new challenges in EU security

EU law enforcement chiefs gather to discuss new challenges in EU security

Yanac
Cannabis smuggling from North America and Thailand into Europe: Europol highlights growing threat

Cannabis smuggling from North America and Thailand into Europe: Europol highlights growing threat

Yanac
Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site

Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site

Yanac

CERT news

TR-102 Critical Vulnerabilities in PHP (Potentially Exploited) – CVE-2026-109618 and CVE-2026-109619

Yanac
Critical security issue affecting PHP

Critical security issue affecting PHP

Yanac
Seven Core Research Areas for a Rapidly Evolving Cyber Landscape

Seven Core Research Areas for a Rapidly Evolving Cyber Landscape

Yanac

Featured categories

Chrome 156
Editors' Pick

Chrome 156

Geronimo
PAN-OS: kihasznált GlobalProtect
Editors' Pick

PAN-OS: kihasznált GlobalProtect

Geronimo
Signal: aktív maradhatott a mikrofon
Editors' Pick

Signal: aktív maradhatott a mikrofon

Geronimo
Oracle Patchday
Editors' Pick

Oracle Patchday

Geronimo

IOT

ICS

5G trends

Interested in Trying Apple’s HomeView? Make Sure You Buy the Right Model

Interested in Trying Apple’s HomeView? Make Sure You Buy the Right Model

Yanac
What Can a Roborock Robot Vacuum and Mop Do? 5 Common Scenarios, Plus Models to Shop

What Can a Roborock Robot Vacuum and Mop Do? 5 Common Scenarios, Plus Models to Shop

Yanac
Apple’s HomeView Event Left Me With Questions

Apple’s HomeView Event Left Me With Questions

Yanac
I’ve Tested Echo Shows and Nest Hubs. Here’s How Apple’s HomeView Display Stacks Up

I’ve Tested Echo Shows and Nest Hubs. Here’s How Apple’s HomeView Display Stacks Up

Yanac
I’ve Tested Echo Shows and Nest Hubs. Here’s How Apple’s HomeView Display Stacks Up

I’ve Tested Echo Shows and Nest Hubs. Here’s How Apple’s HomeView Display Stacks Up

Yanac
Accenture, Dragos and SANS Institute launch $10 million initiative to strengthen cybersecurity at US utilities

Accenture, Dragos and SANS Institute launch $10 million initiative to strengthen cybersecurity at US utilities

Yanac
GAO outlines 2027-2032 agenda for congressional oversight of federal cyber defenses, critical infrastructure, AI risks

GAO outlines 2027-2032 agenda for congressional oversight of federal cyber defenses, critical infrastructure, AI risks

Yanac
Resilience reports energy and utilities sector faces rising cyber exposure from ransomware, vulnerable OT systems

Resilience reports energy and utilities sector faces rising cyber exposure from ransomware, vulnerable OT systems

Yanac
Singapore’s CSA and Google identify safeguards and access controls to address autonomous AI agent risks

Singapore’s CSA and Google identify safeguards and access controls to address autonomous AI agent risks

Yanac
Dispel, Tenable integrate OT asset intelligence with zero-trust remote access controls to boost industrial cybersecurity

Dispel, Tenable integrate OT asset intelligence with zero-trust remote access controls to boost industrial cybersecurity

Yanac
The Googlebook work test: Can an Android laptop get the job done?

The Googlebook work test: Can an Android laptop get the job done?

Yanac
Before you automate systems, decide which data wins

Before you automate systems, decide which data wins

Yanac
Remediation in the era of AI: Fix what matters first

Remediation in the era of AI: Fix what matters first

Yanac
AI isn’t hallucinating—but your data might be

AI isn’t hallucinating—but your data might be

Yanac
The Patch Apocalypse is here. Patching everything isn’t the answer.

The Patch Apocalypse is here. Patching everything isn’t the answer.

Yanac

Vulnerabilities

CVE-2026-111817 | Apache Traffic Server up to 8.1.11/9.2.15/10.1.4/10.2.0 Chunked Transfer resource consumption

Yanac

CVE-2026-112381 | Apache Traffic Server 9.2.15/10.1.4/10.2.0 null pointer dereference

Yanac

CVE-2026-111812 | Apache Traffic Server up to 8.1.11/9.2.15/10.1.4/10.2.0 origin_server_auth plugin privileges management

Yanac

CVE-2026-111811 | Apache Traffic Server up to 8.1.11/9.2.15/10.1.4/10.2.0 tsmemcache authorization

Yanac

CVE-2026-112408 | AWS Amazon SageMaker Python SDK up to 2.257.2/3.9.x Bucket default_bucket input validation

Yanac

CVE-2026-114438 | Red Hat Keycloak/Single Sign-On Update User Locale improper authorization

Yanac

CVE-2026-114135 | Jupyter Server up to 2.5.x GatewayClient GatewayClient.url is_authorized authorization (EUVD-2026-107544)

Yanac

CVE-2026-114136 | encode Django REST Framework up to 3.18.1 JSONParser parsers.py JSONParser.parse resource consumption (EUVD-2026-107546)

Yanac

CVE-2026-114137 | encode Django REST Framework up to 3.18.1 TokenProxy models.py TokenProxy.delete return value

Yanac

CVE-2026-114138 | encode Django REST Framework up to 3.18.1 MediaType Parser negotiation.py DefaultContentNegotiation.get_accept_list resource consumption

Yanac

CVE-2026-114139 | getsentry sentry-javascript up to 9.47.1/10.75.1/11.0.0-rc.0 Webpack Integration improper authorization

Yanac

CVE-2026-114140 | Jupyter nbconvert up to 7.17.1 ExtractOutputPreprocessor extractoutput.py path traversal

Yanac

CVE-2026-114141 | BinaryMuse toml-node up to 5.0.0 Compiler lib/compiler.js addTableArray resource consumption

Yanac

CVE-2026-114143 | BinaryMuse toml-node up to 5.0.0 TOML Parser lib/compiler.js assign/deepRef/setNestedKey memory allocation

Yanac

CVE-2026-114142 | BinaryMuse toml-node up to 5.0.0 TOML Parser lib/compiler.js quoteDottedString prototype pollution

Yanac

CVE-2026-114144 | BinaryMuse toml-node up to 5.0.0 TOML Parser lib/parser.js toml.parse resource consumption

Yanac

CVE-2026-96638 | Pillow up to 12.x RLE Decoder BmpImagePlugin.py BmpRleDecoder.decode denial of service

Yanac

CVE-2026-96641 | python-pillow Pillow up to 12.x PILfont src/_imaging.c integer overflow

Yanac

CVE-2026-114145 | gitpython-developers GitPython up to 3.2.0 Submodule base.py create_submodule path traversal

Yanac

CVE-2026-96642 | python-pillow Pillow up to 12.x src/PIL/TarIO.py TarIO resource consumption

Yanac

CVE-2026-82987 | ViewSonic vCast up to 3.2.715 Screen Capture Endpoint missing authentication

Yanac
Take me home!

Follow Us:

Rss Linkedin