ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “security-bulletin”

30 stories

Searchkeywordsmart
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllVulnerability 1
SeverityAllcritical 0high 1medium 0low 0info 0

Smart search ranks by meaning as well as keywords (one row per story, last 45 days).

HPE security advisory (AV26-909)

Canada's Cyber Centre relayed HPE advisories covering vulnerabilities in Aruba ClearPass Policy Manager and HPE IceWall products.

Canadian Centre for Cyber Security advisory AV26-909, dated September 10, 2026, flags vulnerabilities in HPE products disclosed on September 9, 2026. Affected products include Aruba ClearPass Policy Manager versions prior to or equal to 6.11.14 and 6.12.8, and multiple HPE IceWall versions and models. Bulletins cover multiple ClearPass vulnerabilities, a remote bypass of security restrictions in IceWall, and an IceWall denial-of-service vulnerability; administrators are urged to review the bulletins and apply updates.

Canadian Centre for Cyber Securityupdated · 8h agofirst · 6d agoAdvisory 2 sources

Threat Bulletin

Palo Alto Networks Unit 42 published a threat bulletin, but no article body was available for detailed analysis.

The feed item contained only the title 'threat bulletin' with no article text. No specific incidents, actors, or vulnerabilities could be extracted from the available content.

Palo Alto Unit 42 · 20d agoAdvisory

Risky Bulletin: The EU publishes its upcoming cybersecurity standards

ETSI releases 17 draft cybersecurity standards vendors must meet when the EU Cyber Resilience Act takes effect in December 2027.

The European Telecommunications Standards Institute published 17 interim draft standards covering operating systems, routers, firewalls, VPNs, SIEMs, browsers, password managers, smart home devices, toys and wearables. They mandate basic security features such as post-sale updates, shipped SBOMs, modern cryptography and secure-by-default settings; public comments run until November, with final versions expected in December, one year before CRA compliance begins in December 2027. The newsletter also reports Irregular taking responsibility for AI test-environment escapes involving Anthropic and Meta frontier models, a breach at France's tax agency exposing 678,000+ citizens' data claimed by hacker ZeroBytes, and Kazakhstan eGov data covering 15 million citizens listed for sale on an underground forum. Additional briefs cover a $3.2 million Harmony Protocol theft crashing the ONE token 40%, Columbus Police still restoring systems two years after ransomware, DDoS attacks on Threema's provider, and Ukraine's GUR claiming a cyberattack on Wildberries.

Risky Business News · Aug 17, 2026Policy & legal2

Android security advisory – September 2026 monthly rollup (AV26-920)

Canadian Cyber Centre relays Android's September 2026 security bulletin, urging users and administrators to apply device updates.

The Canadian Centre for Cyber Security issued advisory AV26-920 pointing to the Android security bulletin published September 8, 2026. Users and administrators are encouraged to review the linked bulletin and apply necessary updates as they become available. The alert itself lists no specific CVEs, affected components, or exploitation details.

Canadian Centre for Cyber Security · 2d agoAdvisory

Security Affairs newsletter Round 591 by Pierluigi Paganini

Security Affairs general newsletter Round 591 aggregates recent security news; the provided page text contains only cookie-consent boilerplate.

This general Security Affairs newsletter (Round 591 by Pierluigi Paganini, international edition) aggregates recent cybersecurity news. The provided page text contains only cookie-consent language, so the specific covered stories are unknown.

Security Affairs · 24d agoIndustry

OpenSSL security advisory (AV26-846)

Canada's Cyber Centre relayed an OpenSSL advisory (AV26-846) covering vulnerabilities fixed across seven branches, urging users to update to patched releases.

Canadian Centre for Cyber Security bulletin AV26-846 states that OpenSSL is affected by vulnerabilities fixed in 1.0.2zr, 1.1.1zi, 3.0.22, 3.4.7, 3.5.8, 3.6.4, and 4.0.2. Given OpenSSL's ubiquity in TLS stacks, administrators should review the OpenSSL advisories and apply updates. The bulletin includes no exploitation details or CVE identifiers.

Canadian Centre for Cyber Security · 22d agoAdvisory

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 112

Security Affairs publishes its 112th malware newsletter roundup covering recent malware and cybercrime developments.

This is the 112th installment of Security Affairs' recurring malware newsletter, which aggregates recent malware and cybercrime stories into a single roundup. The retrieved page text contains only cookie-consent boilerplate, so no specific malware families, campaigns or indicators are described in the available content.

Security Affairs · 17d agoMalware

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 111

Security Affairs malware newsletter Round 111 roundup; the provided page text contains only cookie-consent boilerplate with no story details.

Security Affairs published Round 111 of its malware newsletter, a periodic roundup of recent malware coverage. The provided page text contains only cookie-consent language, so no specific stories, actors, or incidents can be extracted.

Security Affairs · 24d agoMalware

Security Affairs newsletter Round 594 by Pierluigi Paganini – INTERNATIONAL EDITION

Weekly Security Affairs newsletter aggregates top stories including Cisco FMC exploitation, Qilin ransomware, Chrome zero-days, and Berlin leak.

Pierluigi Paganini's Security Affairs newsletter Round 594 (International Edition) rounds up the week's security headlines. Topics include attackers exploiting a critical Cisco FMC flaw to deploy Qilin ransomware, SonicWall mass exploitation linked to a UK council attack, multiple CISA KEV additions, Chrome zero-days used by four nation-state actors, a $320 million Liquid Network theft, and a Berlin ransomware data leak. It also covers AI security items such as agent sandbox failures and distillation campaigns by Chinese AI firms.

Security Affairs · 3d agoIndustry in the wildCVE-2026-42016CVE-2026-42018CVE-2026-82329+1 CVEs1

Jenkins security advisory (AV26-877)

Canada's Cyber Centre relayed a Jenkins advisory (AV26-877) covering core and numerous plugin vulnerabilities fixed in 2.568.3/2.580.

The Canadian Centre for Cyber Security published advisory AV26-877 for the Jenkins security advisory dated September 2, 2026. Affected products include Jenkins releases other than 2.568.3 and 2.580, plus plugins such as GitLab, LDAP, Microsoft Entra ID, SAML, Script Security, Pipeline Build Step, and others. Administrators are encouraged to review the linked advisory and apply necessary updates.

Canadian Centre for Cyber Security · 13d agoAdvisory

Security Affairs newsletter Round 592 by Pierluigi Paganini

Security Affairs newsletter Round 592 aggregates the week's top cybersecurity stories curated by editor Pierluigi Paganini.

Security Affairs published Round 592 of its newsletter curated by editor Pierluigi Paganini, aggregating recent cybersecurity news. The available page text contains only cookie-consent boilerplate and no specific incident details.

Security Affairs · 11d agoIndustry

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 114

Security Affairs publishes Malware Newsletter Round 114, a routine weekly digest; page text only contains the site's cookie consent notice.

Security Affairs released Malware Newsletter Round 114, its recurring roundup of malware-related news, on September 13, 2026. The extracted article text contains only the website's cookie consent banner, so the specific malware stories covered in this edition are unknown. This is a routine digest item with no standalone incident details.

Security Affairs · 3d agoMalware1

GNU security advisory (AV26-923)

Canadian Cyber Centre advisory AV26-923 flags a stack overflow in GNU libextractor before v1.15 via OLE2 files.

The Canadian Centre for Cyber Security issued advisory AV26-923 on September 15, 2026, covering CVE-2026-91752, a stack overflow vulnerability in GNU libextractor versions prior to 1.15 triggered via OLE2 file parsing. The Cyber Centre encourages users and administrators to review the provided links and apply necessary updates as they become available.

Canadian Centre for Cyber Securityupdated · 3h agofirst · 1d agoAdvisory 2 sourcesCVE-2026-91752

Adobe security advisory (AV26-848)

Canada's Cyber Centre relayed Adobe advisories covering vulnerabilities in Campaign Classic, Substance 3D apps, Adobe XD, Illustrator, and C2PA tools.

Bulletin AV26-848 lists Adobe vulnerabilities affecting Campaign Classic (through 7.4.4 build 9400), Substance 3D Designer, Painter, and Sampler, Adobe XD, C2PA Tool, Content Credentials Rust SDK, and Illustrator 2025/2026. The Canadian Centre for Cyber Security encourages users and administrators to review the linked Adobe bulletins and apply updates. Specific CVE identifiers are not enumerated in the advisory text.

Canadian Centre for Cyber Security · 21d agoAdvisory

The August 2026 Security Update Review

ZDI's August 2026 review covers a smaller-but-still-huge Microsoft and Adobe patch batch, with Adobe shipping 51 CVEs across five bulletins.

The Zero Day Initiative's August 2026 Security Update Review covers the latest Adobe and Microsoft patches. Adobe released five bulletins addressing 51 unique CVEs. The release is smaller than July's but still large by historical standards, which ZDI notes reflects a 'new normal' in patch density.

Zero Day Initiative Blog · Aug 11, 2026Vulnerability1

HuggingFace: Security.txt

Hugging Face published a security.txt file, prompting limited Hacker News discussion of the RFC 9116 disclosure standard.

Hugging Face's security.txt file, which lists its security contact and disclosure channels per the RFC 9116 standard, drew attention on Hacker News. The RFC 9116 standard lets organizations publish where and how security researchers should report issues, but the submission received only one comment.

Hacker News · securityupdated · 5d agofirst · 5d agoIndustry 2 sourcesHN 22↑ · 1 comments

Jenkins Security Advisory 2026-09-02

Jenkins releases a security advisory affecting Jenkins Core, update-center2, and 17 plugins including GitLab, SAML, LDAP, Microsoft Entra ID, and Script Security.

Jenkins published its September 2, 2026 security advisory covering Jenkins Core, the update-center2 tool, and 17 plugins, including widely deployed ones such as GitLab, SAML, LDAP, Microsoft Entra ID, Script Security, SonarQube Scanner, and Pipeline: Groovy Libraries. The announcement text does not include CVE identifiers, affected version ranges, or any statement about active exploitation. Jenkins plugin advisories typically bundle fixes for issues like stored XSS, CSRF, and missing permission checks. Administrators running any of the listed components should update them via the Jenkins update center.

Jenkins Security Advisories · 14d agoAdvisory1

Security Affairs newsletter Round 590 by Pierluigi Paganini

Weekly Security Affairs newsletter roundup aggregating top cybercrime, malware, APT and AI security stories including ExfilSquad, Kimwolf v7 and Kimsuky AI use.

This is the Round 590 weekly newsletter from Security Affairs, linking to the week's major stories rather than reporting a single incident. Headlines include ExfilSquad extortion, a 7.3M chess.com record leak, Kimwolf botnet v7, SharePoint exploitation after a public PoC, Kimsuky integrating AI, and China-linked autonomous-style attacks. It is a digest and promotional item with no standalone technical details.

Security Affairs · Aug 16, 2026Industry

New Phishing Attacks Use Trusted Email Infrastructure and URL Cloaking to Bypass Security Tools

Virus Bulletin Q3 2026 report details phishing using DKIM-aligned senders, Amazon SES delivery, and real-time URL cloaking to evade email security and scanners.

Virus Bulletin's Q3 2026 testing found phishing campaigns delivered through trusted infrastructure like Amazon SES with DKIM-aligned sender domains. Samples included a German overdue-invoice lure redirecting to OpenSea crypto fraud and a Romanian BCR-branded PSD2 banking credential-theft campaign. Cloaking pages used hidden iframes, browser fingerprinting, and time-zone checks to show different content to scanners versus victims. Defenders are urged to inspect full redirect chains rather than attachments or initial URLs alone.

Cyber Security Newsupdated · 1d agofirst · 1d agoPhishing & fraud in the wild 2 sources

A week in security (August 31 – September 6)

Malwarebytes publishes its weekly security recap covering cyber news from August 31 through September 6.

Malwarebytes Labs' recurring 'A week in security' digest aggregates the past week's cybersecurity stories. The published text contains only newsletter boilerplate without specific incident, vulnerability, or threat-actor details.

Malwarebytes Labs · 9d agoIndustry

Cybersecurity in Power Grids: Standards and Research Challenges

Survey contrasts IT and OT security in smart grids, reviewing IEC 62351, IEC 62443, ISO 27001 standards and AI-driven detection trends.

The paper examines Smart Grid cybersecurity, emphasizing critical distinctions between IT and OT environments. It analyzes grid architecture, substation threats, and key international standards including IEC 62351, IEC 62443, and ISO 27001. It concludes with an overview of recent research trends such as AI-driven threat detection.

arXiv cs.CR · 1d agoResearch

Mozilla security advisory (AV26-924)

Canadian Cyber Centre advisory AV26-924 lists vulnerabilities in Firefox 156 and Firefox ESR 115.41, 140.16, and 153.3, urging users to update.

The Canadian Centre for Cyber Security issued advisory AV26-924 on September 15, 2026, covering vulnerabilities in Firefox versions prior to 156 and Firefox ESR versions prior to 115.41, 140.16, and 153.3. Users and administrators are encouraged to review Mozilla's security advisories and apply updates. No exploitation details are included in the advisory.

Canadian Centre for Cyber Security · 1d agoAdvisory

Risky Bulletin: White House lets private companies carry out offensive cyber ops

A White House memo directs DHS to create a program letting vetted private companies conduct US-government-directed offensive cyber operations against cybercrime.

A presidential memo tasks the DHS National Coordination Center with building a program, under DOJ and DHS oversight, through which private-sector companies can conduct offensive cyber operations against large-scale cybercrime organizations. Requirements include secure facilities, vetted personnel, a $1 million escrow for damages, and written approvals co-signed by DHS and DOJ executive directors. The program must launch within 60 days, around October 11, expanding a March executive order targeting scam compounds, ransomware, and other large-scale cybercrime.

Risky Business News · Aug 14, 2026Policy & legal

A bold new strategy or a dangerous precedent? Experts are divided on Trump's memo.

Trump presidential memorandum authorizes private-sector companies to conduct federally supervised hacking operations against transnational criminal organizations.

A newly signed presidential memorandum enlists private companies in federal law enforcement hacking operations aimed at transnational criminal organizations, with a 60-day window to establish the program. Experts told CyberScoop the shift raises attribution, targeting and constitutional questions, including risks of private firms accidentally attacking foreign governments and procedures for prior approval before targeting US persons. Critics likened the approach to historical letters of marque, while supporters including NSC cyber policy director Amanda Naylor framed it as bringing private-sector speed to the fight against cybercrime and fraud.

CyberScoop · Aug 13, 2026Policy & legal

Mozilla security advisory (AV26-868)

Canada's Cyber Centre reports Mozilla vulnerabilities fixed in Firefox 155 and Firefox ESR 115.40, 140.15, and 153.2.

Canadian Centre for Cyber Security advisory AV26-868, dated September 1, 2026, notes vulnerabilities in Firefox (versions prior to 155) and Firefox ESR (prior to 115.40, 140.15, and 153.2). The bulletin links to Mozilla's security advisories and urges users and administrators to update. No CVE identifiers or exploitation details are provided.

Canadian Centre for Cyber Security · 15d agoAdvisory

17th August – Threat Intelligence Report

Colombia's Ministry of Justice suffered a ransomware attack disrupting drug-monitoring and legal public services, per Check Point's 17 August 2026 threat intelligence report.

Check Point Research's weekly threat intelligence bulletin for 17 August 2026 leads with a ransomware attack on Colombia's Ministry of Justice. The attack affected part of the ministry's technology infrastructure and disrupted public services related to illicit-drug monitoring and legal processes. Officials confirmed that some files were impacted; the bulletin also aggregates other cyber research and attack discoveries from the week.

Check Point Research · Aug 17, 2026Ransomware

Weekly Cybersecurity Newsletter Bulletin – Microsoft 0-day, FortiOS, PAN-OS Flaw, Revolut Data Breach, and 20+ Stories

Weekly roundup: Microsoft patches 973 flaws including two actively exploited zero-days; FortiOS CAPWAP flaw deploys PivotC2 RAT; PAN-OS root RCE disclosed.

Microsoft's September 2026 Patch Tuesday fixed 973 vulnerabilities, including two zero-days under active exploitation: CVE-2026-85880 (Windows ALPC) and CVE-2026-81963 (Windows Update Stack), both elevation-of-privilege bugs. SOCRadar reported active exploitation of CVE-2025-25249 (CVSS 9.8) in FortiOS CAPWAP, deploying a Node.js RAT called PivotC2 that exfiltrates Exchange mailboxes to Wasabi cloud storage; 178 devices were compromised out of 30,000 scanned IPs, attributed to a Russian-speaking financially motivated group. Palo Alto disclosed CVE-2026-0310, a 9.2-rated buffer overflow enabling root code execution on PA-Series firewalls, and Fortinet disclosed CVE-2026-84393, a ZTNA certificate validation MITM flaw. Cyera also revealed CVE-2026-6471 ('PostGREShell'), a 12-year-old PostgreSQL logical-decoding flaw allowing code execution via REPLICATION-privileged accounts.

Cyber Security News · 2d agoExploit / PoC in the wildCVE-2026-85880CVE-2026-81963CVE-2025-25249+3 CVEs3

Cisco Advance Notification for Publication of September 16, 2026, Security Advisories

Cisco will publish security advisories with fixed software on September 16, 2026, covering BroadWorks, ISE, Nexus Dashboard, ASA, FMC, FTD and ThousandEyes.

Cisco PSIRT announced advance notification for security advisories to be published on September 16, 2026, along with fixed software releases. Affected products include BroadWorks CommPilot Application Software, Identity Services Engine (ISE), Nexus Dashboard, Secure Firewall ASA, Secure Firewall Management Center (FMC), Secure Firewall Threat Defense (FTD), and ThousandEyes Virtual Appliance. ISE, Nexus Dashboard and the Secure Firewall products receive security hardening releases, and the ASA, FMC and FTD advisories will be included in the same combined release.

Cisco Security Advisories · 7d agoAdvisory