Aggregator

A vulnerability identified as critical has been detected in AWS bedrock-agentcore up to 1.18.0. This affects the function install_packages of the component Python SDK. Performing a manipulation results in improper neutralization. This vulnerability is reported as CVE-2026-16796. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in WPO365 Login Plugin up to 43.2 on WordPress. The impacted element is the function Ajax_Service::verify_ajax_request/Ajax_Service::update_settings of the component Nonce Verification. Such manipulation of the argument Settings leads to cross-site request forgery. This vulnerability is documented as CVE-2026-15212. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in Shopware up to 6.7.10.0. It has been rated as problematic. The affected element is an unknown function of the file /api/oauth/sso/auth of the component SSO Entry Point. This manipulation of the argument Referer causes open redirect. This vulnerability is registered as CVE-2026-48012. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

Origin Energy has confirmed that an unauthorized party accessed and subsequently leaked customer data online, exposing sensitive personally identifiable information (PII), among others. [...]

The move stems from a Trump executive order as the administration continues to pursue cyber-enabled fraud and other crimes.

The post Rubio restricts visas for sextortionists, cyber scammers appeared first on CyberScoop.

A vulnerability was found in forgekeep nebula-mesh up to 0.3.1. It has been declared as very critical. Impacted is an unknown function of the file internal/configgen/generator.go/internal/web/advanced.go of the component Config Generator/Web Handler. The manipulation of the argument ListenHost/TunDevice results in code injection. This vulnerability is cataloged as CVE-2026-47722. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SharePoint and Check Point flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added DD-WRT, Langflow, and WordPress flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws added to the KeV catalog: The first flaw added to the KeV […]

A malvertising campaign on the Bing search service is pushing a fake Claude desktop app installer hosted on a legitimate Claude.ai domain to deliver the SectopRAT malware. [...]

In an era dominated by cyber threats, the importance of physical security penetration testing often gets overshadowed. However, a robust security posture requires a holistic approach that addresses vulnerabilities in both the digital and physical realms. A determined attacker can bypass sophisticated cyber defenses simply by walking through an unlocked door, exploiting weak physical controls, […]

The post Top 10 Best Physical Security Penetration Testing Firms 2026 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Currently trending CVE - Hype Score: 16 - Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Currently trending CVE - Hype Score: 16 - Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Currently trending CVE - Hype Score: 16 - Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Currently trending CVE - Hype Score: 16 - Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

Currently trending CVE - Hype Score: 1 - Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Perhaps you’ve seen something that should sail out of cache get dragged back to the origin by a stray Set-Cookie or Cache-Control, headers that can be difficult to change on the origin itself. Cache Response Rules is the fix, applied at the right time.

A Russian state-supported espionage group spent months reading Western mailboxes through a then-unknown flaw in Zimbra's webmail client. The payload goes after the last 90 days of email, the organization's entire email directory, the password saved in the browser and the codes kept for two-factor recovery. Opening the message was enough to start it. The NSA, CISA and partner agencies published

Cisco Talos uncovered msaRAT, a Chaos ransomware RAT that hides C2 traffic by routing it through Chrome or Edge using the Chrome DevTools Protocol. Cisco Talos disclosed msaRAT, a Rust-based remote access trojan attributed to the Chaos ransomware group that routes its entire command-and-control channel through the victim’s own Chrome or Edge browser. The malware […]

Раньше ИИ спотыкался именно на строгости рассуждений. В этот раз штрафовать было не за что.

The joint advisory warns that Russia-sponsored threat actors associated with an advanced persistent threat group, known as Laundry Bear, are exploiting a known vulnerability in Zimbra webmail.