On 27 October 2026, the US Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-48356, a file upload flaw in Adobe Commerce and Magento Open Source, to its Known Exploited ...
The breach targeting PwC originated from a compromise of a third-party vendor hosting employee learning records. The Everest group, active since at least December 2020, is known for leveraging a ...
Korean Air and Asiana Airlines experienced a data breach involving unauthorized access to customer reservation information through the external Amadeus IT Group reservation and ticketing system. The ...
Rakus Light Cloud, the Rakus subsidiary that runs the Japanese email newsletter service Blastmail (ブラストメール), says an outside third party broke into its systems and took data out. In its notice updated ...
On 22 October 2026, TianoCore, the project that maintains EDK II, published an advisory for CVE-2026-97631, a buffer overflow in the network boot (PXE) driver of EDK II (TianoCore GHSA-99cj-7hg9-mp4m) ...
GMO Internet, the Japanese hosting provider, says a third party gained unauthorized access to its Onamae.com Desktop Cloud service and installed malicious programs in some customers' server ...
The core technical vector exploited by Discover-Tech was the abuse of the RTB process in digital advertising. RTB allows advertisers to bid in real time for ad placements on websites and mobile ...
On 23 October 2026 the Ruby core team released Ruby 4.0.9, 3.4.12 and 3.3.13. The releases fix three bugs in Onigmo, the regular-expression engine built into Ruby. GitLab had found that these bugs ...
On 26 October 2026 Apple released iOS 18.7.11 and iPadOS 18.7.11, bringing its fix for CVE-2026-86950 to older devices that cannot run newer versions, including iPhone XS, iPhone XS Max, iPhone XR and ...
The Emperador ransomware group, first observed in September 2026, has rapidly escalated its operations, targeting high-profile organizations across multiple sectors. The group’s modus operandi ...
CVE-2026-110447 is an unauthenticated OS command injection in Collabora Online - Built-in CODE Server, an optional Nextcloud app with the package name richdocumentscode. Collabora's advisory says a ...
Genesys, the contact-centre and customer-experience software company, says an unauthorized third party got into some of its internal business systems, including a learning management system (LMS) and ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results