Search: “socket”

200 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 339 Vulnerability 203 Exploit / PoC 73 Threat actor 56 Ransomware 51 Data breach 45 Industry 30 Policy & legal 23 Phishing & fraud 20 Advisory 8 Research 8 AI tools & infra 6 AI safety & security 5 AI industry 5

SeverityAll critical 217 high 399 medium 181 low 62 info 21

Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)

Microsoft's September 2026 Patch Tuesday fixes a record 964 CVEs, including two zero-days actively exploited in the wild.

Microsoft patched a record 964 CVEs in its September 2026 Patch Tuesday release, with 101 rated critical and 824 rated important, making it the largest Patch Tuesday to date. The release includes fixes for two zero-days that were exploited in the wild, with CVE-2026-81963 and CVE-2026-85880 highlighted in the release. Affected products span Windows core components, Office, Exchange, .NET, Visual Studio, Active Directory services (including AD CS and AD FS) and numerous Azure services. Tenable notes the release surpasses July's as the biggest ever.

Tenable BlogSep 8, 18:07 UTC · 8d agoVulnerability in the wildCVE-2026-81963 CVE-2026-858801

Dell Secure Connect Gateway Critical Flaws Allow Unauthenticated Remote Code Execution and Admin Access

Dell patched three critical Secure Connect Gateway flaws (CVE-2026-80172 up to CVSS 9.8) enabling unauthenticated admin access, remote code execution, and host takeover.

Dell Security Advisory DSA-2026-382 fixes three critical vulnerabilities in Secure Connect Gateway (SCG) 5.0, affecting appliances earlier than 5.36.00.16 and applications earlier than 5.36.00.00. CVE-2026-80172 (CVSS 9.8) allows unauthenticated replay of captured requests to obtain ADMIN access due to missing nonce and time validation; CVE-2026-61410 (9.4) enables unauthenticated command execution via missing authorization; CVE-2026-80238 (9.3) involves an exposed Docker socket allowing root access and container escape. Dell urges immediate upgrades and recommends restricting management interfaces to trusted networks and rotating credentials if compromise is suspected.

GBHackersSep 8, 12:04 UTC · 8d agoVulnerability CVE-2026-80172 CVE-2026-61410 CVE-2026-80238

Breaking out: Can AI agents escape their sandboxes?

Help Net SecurityAug 5, 12:04 UTC · Aug 5, 2026Vulnerability2

DirtyClone: A Linux Privilege Escalation That Leaves No Trace on Disk

Security AffairsJun 27, 09:12 UTC · Jun 27, 2026Vulnerability CVE-2026-43503 CVE-2026-31431 CVE-2026-43284+2 CVEs

Curl Fixes a 25-Year-Old Bug in Its Largest CVE Release Yet

Security AffairsJun 25, 19:20 UTC · Jun 25, 2026Vulnerability CVE-2026-8932 CVE-2026-8926 CVE-2026-8925+3 CVEs

GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

The Hacker NewsJun 23, 14:22 UTC · Jun 23, 2026Vulnerability

Thieves can pull off keyless car theft in under a minute and here's how to stop them

Help Net SecurityJun 5, 00:00 UTC · Jun 5, 2026Vulnerability

Nine-year-old Linux kernel flaw enables reliable local privilege escalation (CVE-2026-31431)

Help Net SecurityMay 11, 11:22 UTC · May 11, 2026Vulnerability in the wildCVE-2026-31431

ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-or

The Hacker NewsMay 7, 17:59 UTC · May 7, 2026Vulnerability CVE-2026-7411 CVE-2026-7412 CVE-2026-4670

Widely used Trivy scanner compromised in ongoing supply

Ars Technica · SecurityMar 20, 20:50 UTC · Mar 20, 2026Vulnerability

Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft

The Hacker NewsNov 25, 03:51 UTC · Nov 25, 2025Vulnerability

Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference Frameworks

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2025Vulnerability CVE-2024-50050 CVE-2025-30165 CVE-2025-23254+1 CVEs

RubyGems, PyPI Hit by Malicious Packages Stealing Credentials, Crypto, Forcing Security Changes

The Hacker NewsAug 9, 06:49 UTC · Aug 9, 2025Vulnerability

A new version of Triada spreads embedded in the firmware of Android devices

Kaspersky SecurelistApr 25, 10:00 UTC · Apr 25, 2025Vulnerability

Researchers Find New Exploit Bypassing Patched NVIDIA Container Toolkit Vulnerability

The Hacker NewsFeb 12, 14:04 UTC · Feb 12, 2025Vulnerability CVE-2025-23359 CVE-2024-0132

Critical NVIDIA Container Toolkit flaw could allow access to the underlying host

Security AffairsSep 30, 08:15 UTC · Sep 30, 2024Vulnerability CVE-2024-0132

Critical NVIDIA Container Toolkit Vulnerability Could Grant Full Host Access to Attackers

The Hacker NewsSep 27, 08:29 UTC · Sep 27, 2024Vulnerability CVE-2024-0132

New IBM POWER10 processor has transparent memory encryption for end-to-end security

Help Net SecuritySep 28, 09:58 UTC · Sep 28, 2023Vulnerability

Microsoft Patch Tuesday for January 2023 fixed actively exploited zero

Security AffairsJan 11, 08:05 UTC · Jan 11, 2023Vulnerability in the wildCVE-2023-21674 CVE-2023-21549 CVE-2023-21561+58 CVEs1

STARTTLS implementations in email clients & servers plagued by 40+ vulnerabilities

The RecordDec 13, 00:00 UTC · Dec 13, 2022Vulnerability CVE-2020-9941 CVE-2021-30696 CVE-2020-15685+14 CVEs

Ping bug potentially allows remote hack of FreeBSD systems

Security AffairsDec 5, 10:37 UTC · Dec 5, 2022Vulnerability CVE-2022-23093

New DDoS attack vector discovered in DCCP protocol

The RecordNov 17, 00:00 UTC · Nov 17, 2022Vulnerability

US Government Sites Give Bad Security Advice

Krebs on SecurityMar 25, 19:41 UTC · Mar 25, 2020Vulnerability

Cisco ASA DoS bug attacked in wild

Cisco TalosDec 20, 18:09 UTC · Dec 20, 2019Vulnerability in the wildCVE-2018-0296

OPC UA security analysis

Kaspersky SecurelistMay 10, 10:00 UTC · May 10, 2018Vulnerability

Cisco ASA software is affected by a flaw with 10 out of 10 severity rating. Patch it asap

Security AffairsFeb 8, 00:12 UTC · Feb 8, 2018Vulnerability CVE-2018-0101

Internet Systems Consortium rolled out a patch for a BIND security flaw caused DNS Servers Crash

Security AffairsJan 17, 13:45 UTC · Jan 17, 2018Vulnerability CVE-2017-3145 CVE-2017-3137 CVE-2017-3144

11-Year Old Linux Kernel Local Privilege Escalation Flaw Discovered

The Hacker NewsFeb 22, 18:08 UTC · Feb 22, 2017Vulnerability CVE-2017-6074 CVE-2016-8655

Homebrew 7.0.0 is out, here’s what changed for security

Homebrew 7.0.0 closes eight security advisories, including a High sudo execution bug fixed in 6.0.12, and ships brew vulns vulnerability scanning.

Homebrew 7.0.0 closes eight security advisories rated one High, two Moderate, and five Low. The High flaw let unsigned cask removal metadata execute commands with sudo (fixed in 6.0.12), while the 7.0.0 Moderate closes a LaunchServices escape that let a malicious cask execute code outside the macOS install sandbox. The release ships brew vulns, which checks installed formulae against OSV.dev, extends build attestation verification to third-party tap bottles, and replaces Bubblewrap with Landlock sandboxing on Linux.

Help Net SecuritySep 15, 00:47 UTC · 1d agoVulnerability