CISA KEV lists Outlook spoofing flaw CVE-2026-124194
An unauthorized attacker can spoof over the network without the expected user interaction; deadline is November 24.
1
Stories per day · 30 days
2 RSS
9 stories, newest first · one card per story
Stories tagged #spoofing
CISA adds BeyondTrust Remote Support CVE-2026-102764 to KEV
Weak message-origin checks can allow file operations on the appliance; the federal due date is October 19, 2026.
1
A Secure dToF LiDAR SoC with Dual-Domain Fingerprinting and Event-Driven AFE Circuit Achieving Sensor-Level Attack Resilience
First dToF LiDAR SoC with dual-domain fingerprinting rejects spoofed laser echoes, protecting 73% of the point cloud versus 0% unprotected.
CVE-2026-102511: Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from them
Apache PLC4X before 1.0.0 accepts spoofed ADS discovery responses that can redirect connections, CVE-2026-102511.
Weather Data Spoofing Attacks on Rain-Adaptive Millimeter-Wave Frequency Selection in V2X Communication Networks
Spoofed rainfall inputs let attackers dictate V2X millimeter-wave carrier selection without transmitting, halving platoon range or quadrupling latency in ns-3 simulations.
Compact Vision Models for Iris Presentation Attack Detection under Presentation Attack Instrument Shift and Environmental Degradation
Compact iris presentation-attack detection models under 0.3M parameters show APCER rising 17-30 percentage points against unseen attack instruments, indicating limited deployment readiness.
MarkSec: Capability-Aware Evaluation of Adversarial Attacks Against LLM Watermarks
MarkSec unifies evaluation of stealing, scrubbing, and spoofing attacks against LLM watermarks with quality-constrained success metrics under shared reporting protocols.
First Galileo SAS Authenticated Time Solution
Researchers demonstrate the first timing solution computed from Galileo's new Signal Authentication Service, protecting receivers against GNSS spoofing.
CVE-2026-74761: Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Spoofing of RemoveSubscription clientId
Apache ActiveMQ CVE-2026-74761: moderate clientId spoofing in RemoveSubscription handling, affecting Broker, All and apache-activemq, fixed in 6.3.2 and 5.19.11.