Search: “x”

254 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 954 Malware 771 Ransomware 573 Exploit / PoC 472 Threat actor 338 Industry 295 Policy & legal 284 Data breach 263 Phishing & fraud 171 AI safety & security 88 Research 82 AI industry 64 AI research 60 Model release 41

SeverityAll critical 1561 high 1164 medium 848 low 711 info 286

Apple Updates Everything, (Mon, Sep 14th)

Apple patched a record 261 vulnerabilities across iOS 27, macOS Golden Gate 27, watchOS 27, and other platforms, with none flagged as exploited.

Apple's annual OS update shipped iOS/iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27, and visionOS 27 plus bug-fix releases for the 26 and 15 branches, fixing a record 261 vulnerabilities. Notable issues include multiple kernel flaws allowing root privilege escalation (CVE-2026-43689, CVE-2026-43691, CVE-2026-43698, CVE-2026-43786), remote code execution in CUPS (CVE-2026-43692), kernel memory corruption via malicious NFS servers (CVE-2026-43686, CVE-2026-43687), and WebKit memory corruption from crafted web content (CVE-2026-43715). No vulnerabilities are labeled as actively exploited, and Apple does not assign per-CVE severities. Users report iOS 26.7 being downloaded when iOS 27 is intended, and tools like Little Snitch and BlockBlock need updates before upgrading to macOS 27.

SANS Internet Storm CenterSep 14, 18:33 UTC · 2d agoVulnerability CVE-2022-3437 CVE-2026-20683 CVE-2026-28899+27 CVEs

Vulnerability Spotlight: Multiple privilege escalation vulnerabilities in CleanMyMac X

Cisco TalosJan 2, 18:50 UTC · Jan 2, 2019Vulnerability CVE-2018-4032 CVE-2018-4033 CVE-2018-4034+8 CVEs

IBM Security now opens network of four secure testing facilities globally

Help Net SecurityAug 8, 00:00 UTC · Aug 8, 2018Vulnerability

Threat Roundup for October 11 to October 18

Cisco TalosOct 18, 16:44 UTC · Oct 18, 2019Vulnerability1

New verification system on X gives boost to dark web sales of stolen accounts

The RecordJan 5, 20:49 UTC · Jan 5, 2024Vulnerability

Threat Roundup for May 29 to June 5

Cisco TalosJun 5, 21:18 UTC · Jun 5, 2020Vulnerability

Threat Roundup for August 24

Cisco TalosAug 31, 19:47 UTC · Aug 31, 2018Vulnerability

Barbervisor: Journey developing a snapshot fuzzer with Intel VT-x

Cisco TalosAug 10, 15:01 UTC · Aug 10, 2020Vulnerability

ExtraHop launches a new SaaS-based NDR solution for the cloud-first hybrid enterprise

Help Net SecurityJun 27, 00:00 UTC · Jun 27, 2019Vulnerability

How AI-powered software spreads Russian disinformation on X

Help Net SecurityJul 10, 00:00 UTC · Jul 10, 2024Vulnerability

Google security firm Mandiant working to resolve X account takeover

The RecordJan 3, 23:09 UTC · Jan 3, 2024Vulnerability

Cloud security trends: What makes cloud infrastructure vulnerable to threats?

Help Net SecurityJun 2, 12:32 UTC · Jun 2, 2023Vulnerability

How to confuse antimalware neural networks. Adversarial attacks and protection

Kaspersky SecurelistJun 23, 12:16 UTC · Jun 23, 2021Vulnerability

Friday Squid Blogging: "How the Squid Lost Its Shell"

Schneier on SecurityJan 29, 08:02 UTC · Jan 29, 2020Vulnerability

Warshipping: Attackers can access corporate networks through the mailroom

Help Net SecurityAug 7, 00:00 UTC · Aug 7, 2019Vulnerability

CVE-2018-14773 Symfony Flaw expose Drupal websites to hack

Security AffairsAug 3, 14:08 UTC · Aug 3, 2018Vulnerability CVE-2018-14773

Vulnerability Spotlight: Apple OS X Graphics Kernel Driver Local Privilege Escalation Vulnerability

Cisco TalosMar 22, 21:57 UTC · Mar 22, 2016Vulnerability CVE-2016-1743

CVE-2026-75015: Apache Syncope: Nested secrets leak cleartext into audit records readable

Apache Syncope leaks nested secrets in cleartext into audit records readable by unauthorized users; affects 3.0.x, 4.0.x, and 4.1.x versions.

CVE-2026-75015 is an insufficiently protected credentials vulnerability in Apache Syncope where audit events expose nested secrets in cleartext to users able to read those records. Affected component is syncope-core-provisioning-java 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2. Apache rates the issue moderate severity, and users should upgrade to fixed releases.