Search: “Files API”

236 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1001 Vulnerability 811 Ransomware 470 Exploit / PoC 295 Data breach 256 Threat actor 217 AI tools & infra 146 Policy & legal 120 AI safety & security 85 Phishing & fraud 82 Tools 47 Research 24 Advisory 17 AI industry 16

SeverityAll critical 1118 high 1220 medium 883 low 160 info 249

Dynamic Data Resolver (DDR) — IDA Plugin 1.0 beta

Cisco TalosMay 28, 14:59 UTC · May 28, 2020Vulnerability

30

Google API Keys Quietly Gain Access to Gemini on Android Devices

Infosecurity MagazineApr 8, 16:00 UTC · Apr 8, 2026Vulnerability

30

Windows 10 Bug Let UWP Apps Access All Files Without Users' Consent

The Hacker NewsOct 30, 14:58 UTC · Oct 30, 2018Vulnerability

30

KBOT: sometimes they come back

Kaspersky SecurelistFeb 10, 14:00 UTC · Feb 10, 2020Vulnerability

30

When combining exploits for added effect goes wrong

Cisco TalosAug 14, 16:55 UTC · Aug 14, 2017Vulnerability CVE-2017-0199 CVE-2012-0158

35

Flextype v1.0.0-alpha.3 CMS registerShortcodes() Remote Code Execution via Attacker-Controlled File Inclusion

Flextype CMS v1.0.0-alpha.3 allows PHP remote code execution via path traversal in the Entries API combined with shortcode file inclusion.

Flextype CMS v1.0.0-alpha.3 exposes a remote code execution path through the interaction of the Entries API and Shortcodes::registerShortcodes(). The /api/v1/entries endpoint accepts attacker-controlled entry identifiers containing path traversal sequences, allowing PHP-containing content to be written outside the intended entries directory. A subsequent attacker-controlled path can then be included and executed as PHP. Ron E posted the disclosure to the Full Disclosure mailing list on September 3, 2026.

Full DisclosureSep 4, 00:13 UTC · 12d agoVulnerability 8 sources

34

Google white hat hacker found new bug class in Windows

Security AffairsMar 20, 09:09 UTC · Mar 20, 2019Vulnerability

30

Threat Spotlight: Group 72, Opening the ZxShell

Cisco TalosOct 28, 15:10 UTC · Oct 28, 2014Vulnerability CVE-2011-2462 CVE-2013-3163 CVE-2014-0322

35

Nemesis: Open-source offensive data enrichment and analytic pipeline

Help Net SecurityApr 9, 17:31 UTC · Apr 9, 2024Vulnerability

30

5 Free Vulnerability Scanners You Should Check Out

Help Net SecurityApr 19, 15:23 UTC · Apr 19, 2024Vulnerability

30

PyPI hardens package security with new upload restrictions

Help Net SecurityJul 23, 00:00 UTC · Jul 23, 2026Vulnerability

30

Time-of-Check Time-of-Use Attacks Against LLMs

Schneier on SecuritySep 18, 11:06 UTC · Sep 18, 2025Vulnerability

30

Threat Round Up for Aug 25

Cisco TalosSep 1, 17:12 UTC · Sep 1, 2017Vulnerability1

30

Threat Round-up for Mar 31

Cisco TalosApr 7, 20:49 UTC · Apr 7, 2017Vulnerability

30

Researchers Discover 3 Vulnerabilities in Microsoft Azure API Management Service

The Hacker NewsMay 4, 13:19 UTC · May 4, 2023Vulnerability

30

Threat Spotlight: Holiday Greetings from Pro PoS – Is your payment card data someone else’s Christmas present?

Cisco TalosDec 17, 16:23 UTC · Dec 17, 2015Vulnerability

30

Threat Roundup for September 10 to September 17

Cisco TalosSep 17, 20:28 UTC · Sep 17, 2021Vulnerability

30

Attackers compromised ALL SonicWall firewall configuration backup files

Help Net SecurityOct 9, 00:00 UTC · Oct 9, 2025Vulnerability

30

Ivanti simplifies the IT management experience while adding support for devices of all types

Help Net SecurityNov 4, 00:00 UTC · Nov 4, 2020Vulnerability

30

How we hacked our colleague’s smart home

Kaspersky SecurelistJul 1, 09:00 UTC · Jul 1, 2019Vulnerability

30

VMware Issues Patches to Fix New Flaws Affecting Multiple Products

The Hacker NewsAug 26, 07:50 UTC · Aug 26, 2021Vulnerability CVE-2021-22022 CVE-2021-22027 CVE-2021-22023+5 CVEs

35

An educational robot security research

Kaspersky SecurelistFeb 27, 15:00 UTC · Feb 27, 2024Vulnerability

30

The Mystery of Duqu: Part Five

Kaspersky SecurelistNov 15, 18:15 UTC · Nov 15, 2011Vulnerability CVE-2011-3402

35

Azure AD Credentials Exposed in Public App Settings File

Infosecurity MagazineSep 2, 16:00 UTC · Sep 2, 2025Vulnerability

30

Somebody’s watching! When cameras are more than just ‘smart’

Kaspersky SecurelistMar 12, 10:00 UTC · Mar 12, 2018Vulnerability

30

Microsoft is working on a more secure print system for Windows

Help Net SecurityDec 18, 00:00 UTC · Dec 18, 2023Vulnerability

30

Following the LNK metadata trail

Cisco TalosJan 19, 13:00 UTC · Jan 19, 2023Vulnerability CVE-2015-0096

35

Stealing Windows credentials using Google Chrome

Help Net SecurityMay 15, 00:00 UTC · May 15, 2017Vulnerability

30

Hackers can remotely control thousands of Sonos and Bose speakers

Security AffairsJan 1, 14:39 UTC · Jan 1, 2018Vulnerability

30

Hackers exploit Microsoft Defender SmartScreen bug CVE-2024-21412 to deliver ACR, Lumma, and Meduza Stealers

Security AffairsJul 25, 10:20 UTC · Jul 25, 2024Vulnerability CVE-2024-214121

35

Allstar app helps enforce security best practices for GitHub projects

Help Net SecurityAug 11, 00:00 UTC · Aug 11, 2021Vulnerability

30

Unpatched Windows Kernel Bug Could Help Malware Hinder Detection

The Hacker NewsSep 18, 09:00 UTC · Sep 18, 2017Vulnerability

30

ReVault! When your SoC turns against you… deep dive edition

Cisco TalosAug 9, 13:00 UTC · Aug 9, 2025Vulnerability

30

Capesand is a new Exploit Kit that appeared in the threat landscape

Security AffairsNov 8, 11:01 UTC · Nov 8, 2019Vulnerability CVE-2018-4878 CVE-2018-8174 CVE-2019-0752+2 CVEs

35

Absolute Computrace Revisited

Kaspersky SecurelistFeb 12, 21:45 UTC · Feb 12, 2014Vulnerability

30

Qualys brings web application security to DevOps

Help Net SecurityApr 21, 02:44 UTC · Apr 21, 2018Vulnerability

30

Scripting the disassembler: Local agentic reverse engineering through vbdec’s live COM object model

Cisco TalosJun 18, 10:00 UTC · Jun 18, 2026Vulnerability1

30

CVE-2019-2114 flaw allows hackers to plant malware on Android devices via NFC beaming

Security AffairsNov 2, 15:53 UTC · Nov 2, 2019Vulnerability CVE-2019-2114

35

The game is over: when “free” comes at too high a price. What we know about RenEngine

Kaspersky SecurelistFeb 11, 14:00 UTC · Feb 11, 2026Vulnerability

30

Toyota scrambles to patch customer data leak

Security AffairsMar 28, 22:00 UTC · Mar 28, 2023Vulnerability

30