Intelbras cameras allow unauthenticated firmware updates that cause DoS
A local Wi-Fi attacker can keep cameras offline by repeatedly posting to an unauthenticated upgrade endpoint; firmware R.260804 requires authentication.
52
- Mentions · 7d2
- Mentions · 30d13
- All mentions29
- First seenAug 26, 2026
- Last mentioned2d ago
Timeline
29 articles · newest firstTRACE ranks CVE-to-ATT&CK mappings with constrained multi-evidence
Candidate construction cuts a 201-technique space by about 60% while retaining a ground-truth technique for 95.11%–100% of CVEs.
40
Signal RingRTC before 2.72.0 can keep media flowing after hang-up
CVE-2026-113380, scored CVSS 4.0 9.3, lets a call peer delay teardown so audio and possibly video continue; no in-the-wild use is known.
64
Signal RingRTC before 2.72.0 can leave the mic on after hang-up
CVE-2026-113380, scored CVSS 9.3, lets a call participant fill a 256-entry queue and block teardown.
62
Signal RingRTC bug can leave mic and camera on after hangup
CVE-2026-113380, CVSS 9.3, affects RingRTC before 2.72.0; a conceptual proof of concept exists and CISA KEV does not list it.
64
MITRE ATT&CK v20 Adds New AI Attack Techniques for Prompt Injection and Data Theft
MITRE ATT&CK v20 adds Enterprise techniques for prompt injection, AI exfiltration and result poisoning.
63
MITRE ATT&CK v20 Added 9 New Attack Techniques Covering AI Exploits, MFA Bypass, and CAPTCHA Evasion
MITRE ATT&CK v20 adds nine techniques for AI attacks, MFA bypass, and CAPTCHA evasion.
62
Re: Godot 4.x: heap out-of-bounds write in Radiance HDR image loader
Godot 4.x Radiance HDR loader flaw CVE-2026-110734 is disputed and scored CVSS 2.5.
32
Re: Godot 4.x: heap out-of-bounds write via negative string length in binary resource loader
Disputed CVE-2026-110735 covers a Godot 4.x heap out-of-bounds write scored CVSS 2.5.
28
Re: Godot 4.x: heap out-of-bounds read in OptimizedTranslation message lookup
Disputed CVE-2026-110736 covers a Godot 4.x heap out-of-bounds read scored CVSS 3.6.
26
AWARE-RG: Abstraction Aware Explanation of Resiliency Graphs for Cyber Physical Systems
AWARE-RG explains role-bounded cyber-physical resiliency paths using ATT&CK for ICS and plan repair.
37
Unpatched cross-namespace secret exfiltration in GoogleCloudPlatform/k8s-config-connector - CVE requested (CAN-2026-2039460)
An unpatched Config Connector flaw can exfiltrate secrets across Kubernetes namespaces after Google did not substantively respond.
66
Following 404 Media Investigation, Senator Demands Info About White House's License Plate Surveillance Program
Sen. Ron Wyden demands ONDCP release a 2024 MITRE privacy review of HIDTA license plate reader and cell phone surveillance programs.
30
Moodle LMS 3.9.2: authenticated file-upload validation bypass (CWE-434) leading to RCE under misconfiguration
Researcher reports an authenticated Moodle 3.9.2 file-upload bypass that can yield RCE if misconfigured.
46
17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360
CTM360 says ClickFix, now the top enterprise initial-access method, hides lure hosts on Polygon and delivers info-stealers.
80
Re: Flatpak 1.18.1 fixes multiple vulnerabilities
MITRE assigned CVE-2026-96808 and CVE-2026-96807 to Flatpak flaws fixed in 1.18.1.
32
Re: Flatpak 1.18.1 fixes multiple vulnerabilities
Simon McVittie disclosed CVE identifiers for multiple vulnerabilities fixed in Flatpak 1.18.1, with two IDs still pending from MITRE.
38
Reasoning Topology Matters: A Controlled Study of LLM-Based Cybersecurity Analysis
A study finds graph-structured LLM reasoning lifts cybersecurity analysis accuracy by up to 12.2 points.
48
Cloud Threat Emulation on Autopilot: Context is Everything
Elastic outlines a plan-first cloud threat-emulation lifecycle so detections rest on realistic identity, telemetry, and cleanup.
41
CISA Urges Critical Infrastructure to Plant Decoys Inside Networks
CISA's first decoy guidance tells critical infrastructure to deploy honeytokens and tripwires inside networks, mapped via MITRE ATT&CK and Engage, to speed detection.
50
CISA Urges Organizations to Deploy Cyber Decoys to Detect Hackers Inside Networks
CISA's new guidance urges organizations to deploy cyber decoys like honeytokens and tripwires to detect attackers using valid credentials and living-off-the-land techniques.
30
Using Cyber Decoys to Strengthen Detection and Response
CISA released guidance on cyber decoys—tripwires, breadcrumbs, honeytokens—to help defenders detect adversaries using valid credentials and living-off-the-land techniques.
28
The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment
Rapid7 analyzes how fraud marketplaces are fragmenting into specialized shops after larger marketplaces were dismantled, aided by new MITRE F3 framework
38
Learning Intrusion Response Strategies for OT Systems
Researchers model OT intrusion response as a POMDP and train PPO-based automated response strategies effective against MITRE attacks in an emulated OT system.
30
Evidence-Grounded Retrieval for Investigation Hunt Lead Generation from CTI Reports
AHLERT generates environment-aware threat hunting leads from CTI reports using ATT&CK-seeded knowledge graph retrieval, roughly doubling F1 over flat-RAG baselines.
45
Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
Malicious .git core.fsmonitor configs let attacker code run in AI coding agents like Claude Code and Codex; four of eight flaws remain unpatched.
68
CISA review makes the case for eliminating vulnerability classes
CISA's FY2024-2025 vulnerability review urges eliminating recurring vulnerability classes, finding 41.5% of 2025 KEV entries map to persistent 'stubborn weaknesses'.
45
What 90 days and a small budget can buy in AI agent security
Versa Field CISO details hidden costs of self-hosting open-weight models and a 90-day AI agent security plan of inventory, blast-radius reduction and testing.
30
The AI Malware Maturity Gap
Recorded Future introduces AIM3, a five-level maturity model for AI malware, showing current attacker AI use is mostly AI-assisted rather than autonomous.
55
Related CVEs
by mentions- Call hangup bypass in Signal RingRTC before 2.72.0
- Path Traversal Leading to Root Write in Flatpak
- CVE-2026-71963<1%8.6Command injection RCE in Hermes Agent via malicious .git/config
- CVE-2022-24346<1%7.8In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possible
- Symlink escape in Flatpak before 1.18.1 lets sandboxed apps read/write host files
- CVE-2026-19592<1%7.3Unsandboxed attacker code execution in OpenAI Codex via malicious Git core.fsmonitor
- CVE-2026-92162<1%7.2Path traversal in Flatpak before 1.18.1 with an OCI remote
- Hardlink file disclosure in Flatpak OCI app installs
- Symlink-based arbitrary file write in Flatpak ld cache regeneration (fixed in 1.18.1)
- Heap out-of-bounds read in Godot Engine translation loader
Appears with
- CISAorganization · 6
- MITRE ATT&CKproduct · 5
- MITREvendor · 4
- Signalvendor · 3
- RingRTCproduct · 3
- Godotproduct · 3
- Googlevendor · 2
- Godotvendor · 2
- MITRE Engageproduct · 2
- CISAvendor · 2
- Moodlevendor · 1
- OWASPorganization · 1
- Microsoft Defenderproduct · 1
- Telegramproduct · 1
- Infodigproduct · 1
- Config Connectorproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.