WHATS PostgreSQL security update fixes 52 vulnerabilities, ends support for PostgreSQL 14
Help Net Security ·
WHATS
THE HAX?
Top story
Also in coverage
New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacks
BleepingComputer ·
Feds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools
The Record from Recorded Future News ·
Cyber Experts Weigh In: How to Fight Artex & AntiFox
darkreading ·
Article feed
60 sources ↓PostgreSQL security update fixes 52 vulnerabilities, ends support for PostgreSQL 14
Self-hosted Claude Managed Agents keeps agent credentials in your environment
Picus puts AI agents on the offensive with autonomous pentesting
Attackers breached 10 organizations with an open-source AI pentest framework
OWASP Top 10 Neocloud and AI Data Center Security Risks project released
JSON Schema References Considered Harmful
NvRoot (CVE-2026-47591) where in neocloud multi-tenant GPU environments, rent = root. Essentially it's a dirty page cache LPE using GPUs as catalyzer
prepared statements prevents SQLi. But it also helped me to exploit a 22 years old PostgreSQL 0-day RCE (CVE-2026-6460)
Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
Cisco Identity Services Engine Authorization Bypass Vulnerabilities
New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacks
Hackers compromise 4,800 GitHub accounts to steal cloud credentials
Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwide
Feds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools
United to block customers from using AI agents, citing cyber threats
Shipping giant Maersk says recent cyber incident affected legacy system
Cyber Experts Weigh In: How to Fight Artex & AntiFox
Extortion Group Luna Moth Flits Into Law Firms a Second Time
Inside an AI Attack Against a US Retailer
On the hunt for ARTEX: understanding agentic attacks in AWS environments
Exchange for breakfast: Turla’s Cereal tricks are not for kids
Inside The Server: 14 Months of Offensive Cyber Operations Targeting Europe
Rogue remote-access campaign spread through ScreenConnect add-on, researchers say
Don’t put Section 702 spying law renewal in defense bill, groups urge Hill leaders
International operation dismantles malware networks, exposes 6.4 million stolen credentials
Microsoft 365 Outage Disrupts Outlook, Exchange Online and Teams
Apache Patches Critical HTTP Server RCE Found by Anthropic, Google
Chrome, Firefox Updates Patch Over 180 Vulnerabilities
Microsoft Cloud Outage Hits Outlook, Teams, Copilot and AI Services
Predator, Pegasus and Graphite: Governments Accused of Spyware Abuse Face Little Accountability
Zoom Fixes Critical Windows Vulnerability Allowing Privilege Escalation
Major Microsoft Outlook Outage Leaves People With Email Jobs Unable to Email
Apple’s HomeView Tries Face Authentication Without FaceID
Security Flaws Across UK Government Sites Exposed ‘God-Tier’ Information
What AMLR Means For Your Existing Customer Book
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them
ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories
New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access
Trained to betray: How post-training supply chain attacks hijack coding agents
The global socket: how threat actors are weaponizing GSocket for stealthy C2
Lessons from 59 Linux Kernel Bug Reports
20 petaflops under your desk
He Let Go of the Wheel in Busy Traffic
Ban AI, Lose Google SEARCH?
CVE-2026-111497 Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder
CVE-2026-105544 .NET Elevation of Privilege Vulnerability
CVE-2026-109475 .NET Denial of Service Vulnerability
Weak Passwords Expose SQL Servers to Cryptominer and Gh0st RAT
Hacked Asian Telcos Used to Intercept Taiwanese Calls and Texts
Lego Takes BrickLink Marketplace Offline After Detecting Unusual Activity
Social Security Numbers, Medical Data Compromised in Amplifon Breach
How to Navigating Continuous Cyber Warfare: Panel Discussion
Is Iran Behind the Recent String of Refrigerator Cyberattacks?
Palo Alto tracks a massive Chinese AI attack that sadly lives up to industry fears
Hackers abuse SQL Server’s weak passwords to drop cryptominers and Gh0st RAT
AI found Linux kernel bugs that remained undetected for decades
WhiteArmor gang claims responsibility for latest cyber attack on shipping giant Maersk
Smashing Security podcast #492: How hackers turned Russian cars into pumpkins
Iranian hackers turned up the heat on French supermarket freezers, says France
Claude Code Extension Hid an SSH Backdoor | Threat
Chinese AI Tried to Phone Home. Nobody Knows Why | Threat Wire
Introducing Theme Studio Pro
Another Way Police Are Locating People from Their Smartphones
Three People Arrested for AI-Enhanced Impersonation Fraud
New OpenSSH Vulnerability
Siemens Building Automation and Energy Products
Siemens Desigo, Gridscale
Siemens Industrial Edge Management
Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)
ISC Stormcast For Thursday, November 12th, 2026 https://isc.sans.edu/podcastdetail/10176, (Thu, Nov 12th)
Microsoft Patch Tuesday November 2026, (Tue, Nov 10th)
Certified for what? How to read a vendor’s ISO 27001 certificate
MDR vs SOC: How to choose the right option for your organisation
The best due diligence on a vendor is who they’ve worked with
Transcending the trust boundaries: how a cloud pentest works
Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs lending a hand
IT threat evolution in Q3 2026. Non-mobile statistics
42% of Scam Victims Who Report to Banks Recover Every Dollar
How Banks Can Spot Scams That Pass Authentication
Fraud Costs Financial Institutions More Than Money
Veterans Day Cybersecurity Livestream | PowerShell Course Preview
Why Your Company Needs an AI Policy (Ask a CISO)
Are CTF Platforms Useful? (Ask a CISO)
ZDI-CAN-33652: Delta Electronics
Active ScreenConnect attacks breach MSPs, impact dozens of organizations
[Vorfallsbericht] Nextcloud LXC-Kompromittierung durch RichDocumentsCode (RCE) – Erkenntnisse und Behebung
binkeep: check a suspicious file without uploading it anywhere
Five Findings From the 2027 State of Threat Intelligence
AI Is Both Target and Tool for Threat Actors
DoppelCart Fraud Network Grows to More Than 250,000 Domains
Vanderbilt restores systems after cyberattack as hackers claim data theft
Remus malware claims Gmail access even after you change your password
Muse sleep band users weren’t told their brain data was training AI
Who Runs the Ransomware Group Qilin?
Microsoft Fixes Nearly 1,100 Security Vulnerabilities
Want to Rent an Internet Address at the White House?
News alert: TENEX.ai previews three new security tools built from a live 26,000-agent AI attack test
LW ROUNDTABLE: Binance heist shows AI multiplies trust chains while handoffs go unguarded
News alert: One Identity updates Safeguard to strengthen privileged access management
i wired my toilet to a Raspberry Pi
you need to use Herdr RIGHT NOW!!
this WiFi GPU is wild.....
Google DeepMind just mathematically verified key parts of Signal
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Vulnerability that lets hackers SSH into Linux devices is under active exploitation
reverse-engineered Dr. Driving and brought it to the browser 💀
GitHub - IcyModz420/nfsu2-network-rce: NFS Underground 2 — Network Remote Code Execution (two heap overflow RCE vectors, CVSS 9.8)
My Linux app changed the DPI on my mouse, but the LED kept the old color. The firmware only repaints on one specific report.
Site Traffic Recommendations: 4 Steps to Reduce Agentic Risk
AI Agent Order Data: Agentic Commerce on Forter’s Network
How to Stop Holiday Return Abuse and Reseller Fraud
Who Hacked Fridges In France?
PDF decryption script
Silverseal: Silverseal is an open-source Linux bootkit and rootkit framework and the first public ARM64 bootkit for Linux distros
Payload Podcast 013 - Catchup
ClickFix Cache Trick
Taking your PHP Website Offline
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
Exchange for breakfast: Turla’s Cereal tricks are not for kids
SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware
I Almost Missed This Kubernetes Vulnerability
Meta paid a $300,000 bounty for this
OpenAI paid $5000 for this account takeover vulnerability that could also leak your private chats
Troubleshooting .json file in Microsoft Defender Workbook
Urgent HELP my telegram got hacked
Getting tired of the nepotism in the industry - U.S
HackTheBox - Garfield
HackTheBox - MakeSense
HackTheBox - Checkpoint
DEF CON 34 - Main - How Dealer Installed AntiTheft System Exposes 1M+ Cars - A Schulman, J Yu, Y Wei
DEF CON 34 - Main - Bird Hunting Season The Final Flight - Jon Gaines
DEF CON 34 - BugBounty - How Cache Poisoning Led to Critical Acct Takeover in TikTok's Web - G Chong
How an Image Causes a Heap Buffer Overflow // libheif
The $2,000 php2shell Challenge Was Unexploitable
php situation 24h later
Fromage-Gate: Old-School Hacking Tactics vs. French Supermarkets
Understanding the Blast Radius of a Cryptographic Change
Eliminating the Blind Spots Between Humans, Machines, and AI
Is curl Getting Harder to Hack? Daniel Stenberg on AI vs. Decades of Hardening
In Singapore for a few days hanging out with hackers and having a good time.
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
Proofpoint Introduces Flex to Help Customers Invest with Confidence as Security Needs Evolve
Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
The AI advantage your company can keep
Bringing CRM into the flow of work and agents into business process for sales and service teams
Introducing the new Copilot with Home, Code and Autopilot
Does your fraud risk assessment measure up when a financial crime occurs?
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
#StopRansomware: SafePay Ransomware
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
Anthropic’s AI Reversal Is A Warning Shot For Agentic Defense
Agentic AI Is Changing Security Decisions: Why Accountability Must Be Designed, Not Assumed
A New OT Security Playbook for Connected Robots
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Ransomware: A Continuing Threat for Small Businesses
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 994 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.