Russian (Country): news timeline & CVEs

CVE-2026-92001: Apache Sling XSS: Missing parser resource limits

Apache Sling XSS before 2.4.12 has an XML entity expansion vulnerability (CVE-2026-92001).

Apache Sling XSS before version 2.4.12 contains a vulnerability (CVE-2026-92001) allowing improper restriction of recursive entity references in DTDs, also known as XML entity expansion. The flaw is tracked as SLING-13336 and was discovered by the Apache Software Foundation. The vendor has released a patch in version 2.4.12 to address the issue.

oss-securitySep 23, 15:45 UTC · 3d agoVulnerability 7 sources CVE-2026-920011

Ryuk ransomware operator gets 2-year sentence after extorting victims for $1.2 million

A Ryuk ransomware operator was sentenced to 2 years in prison for extorting over $1.2 million from victims.

An Armenian national, Karen Vardanyan, was sentenced to two years in U.S. federal prison for his role as a core member of the Ryuk ransomware gang. Prosecutors stated that Vardanyan and his co-conspirators launched over 2,400 ransomware attacks worldwide, including on state and local municipalities and the Universal Health Services hospital chain, receiving at least $15 million in ransoms. Vardanyan personally extorted over $1 million from victims. The Ryuk gang has been linked to Russian cybercriminals and the Trickbot malware, and several other members have been identified and arrested.

The Recordupdated Sep 24, 20:50 UTC · 2d agofirst Sep 23, 15:30 UTC · 3d agoPolicy & legal 8 sources

Russian

Timeline2 articles

Related CVEsby mentions

Appears with

CVE-2026-92001: Apache Sling XSS: Missing parser resource limits

Ryuk ransomware operator gets 2-year sentence after extorting victims for $1.2 million