📰 BleepingComputer
LiteLLM release pipeline hacked to distribute info-stealer malware
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...]
#CyberNews #Infosec
LiteLLM release pipeline hacked to distribute info-stealer malware
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...]
#CyberNews #Infosec
BleepingComputer
LiteLLM release pipeline hacked to distribute info-stealer malware
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.
🔴 CVE Digest — 22 Oct 2026
7 critical vulnerabilities
🔴 CVE-2026-79876 · CVSS 9.3
No description provided
🔴 CVE-2026-79875 · CVSS 9.3
No description provided
🔴 CVE-2026-79874 · CVSS 9.3
No description provided
🔴 CVE-2026-79873 · CVSS 9.3
No description provided
🔴 CVE-2026-79872 · CVSS 9.4
No description provided
🔴 CVE-2026-79871 · CVSS 9.6
No description provided
🔴 CVE-2026-79870 · CVSS 9.6
No description provided
#CVE #Critical #Vulnerability
7 critical vulnerabilities
🔴 CVE-2026-79876 · CVSS 9.3
No description provided
🔴 CVE-2026-79875 · CVSS 9.3
No description provided
🔴 CVE-2026-79874 · CVSS 9.3
No description provided
🔴 CVE-2026-79873 · CVSS 9.3
No description provided
🔴 CVE-2026-79872 · CVSS 9.4
No description provided
🔴 CVE-2026-79871 · CVSS 9.6
No description provided
🔴 CVE-2026-79870 · CVSS 9.6
No description provided
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-79876 - Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing
No description provided
📰 BleepingComputer
Capcom confirms data breach affecting 11.7 million accounts
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information. [...]
#CyberNews #Infosec
Capcom confirms data breach affecting 11.7 million accounts
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information. [...]
#CyberNews #Infosec
BleepingComputer
Capcom confirms data breach affecting 11.7 million accounts
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information.
📰 Dark Reading
What We Missed: Feds Lasso Texas Laptop Farms
In this video, Dark Reading editors discuss some of the news they didn't get a chance to cover, from busting up North Korea's stateside infrastructure in "Operation Lonestar Justice" to Staples' gift card bonanza.
#CyberNews #Infosec
What We Missed: Feds Lasso Texas Laptop Farms
In this video, Dark Reading editors discuss some of the news they didn't get a chance to cover, from busting up North Korea's stateside infrastructure in "Operation Lonestar Justice" to Staples' gift card bonanza.
#CyberNews #Infosec
Darkreading
Feds Lasso Texas Laptop Farms for North Korean IT Workers
In this video, Dark Reading editors discuss news they didn't cover, from "Operation Lonestar Justice" to a reported Staples gift card bonanza.
📰 Dark Reading
Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour
Des centaines de magasins ont subi des pertes se chiffrant en millions d'euros parce qu'ils avaient fait appel à des tiers pour gérer le micrologiciel OT obsolète qui pilotait leurs systèmes de climatisation.
#CyberNews #Infosec
Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour
Des centaines de magasins ont subi des pertes se chiffrant en millions d'euros parce qu'ils avaient fait appel à des tiers pour gérer le micrologiciel OT obsolète qui pilotait leurs systèmes de climatisation.
#CyberNews #Infosec
Dark Reading
Les supermarchés de l'UE paient
Les magasins ont perdu des millions en faisant appel à des prestataires externes pour gérer des micrologiciels OT obsolètes.
📰 BleepingComputer
Railway warns devs to rotate secrets after potential breach
Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week. [...]
#CyberNews #Infosec
Railway warns devs to rotate secrets after potential breach
Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week. [...]
#CyberNews #Infosec
BleepingComputer
Railway warns devs to rotate secrets after potential breach
Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week.
📰 Dark Reading
Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants.
#CyberNews #Infosec
Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants.
#CyberNews #Infosec
Dark Reading
Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants.
🔴 CVE Digest — 22 Oct 2026
2 critical vulnerabilities
🔴 CVE-2026-111594 · CVSS 9.2
InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view...
🔴 CVE-2026-114625 · CVSS 9.9
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
#CVE #Critical #Vulnerability
2 critical vulnerabilities
🔴 CVE-2026-111594 · CVSS 9.2
InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view...
🔴 CVE-2026-114625 · CVSS 9.9
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-111594 - InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information
InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.
⚠️ CERT/CC Vulnerability Notes
Memory corruption vulnerabilities in PHP
Two memory-related vulnerabilities have been identified in PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12. An unauthenticated remote attacker with network access to PHP web services can exploit these vulnerabilities via specially crafted...
#Advisory #Vulnerability
Memory corruption vulnerabilities in PHP
Two memory-related vulnerabilities have been identified in PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12. An unauthenticated remote attacker with network access to PHP web services can exploit these vulnerabilities via specially crafted...
#Advisory #Vulnerability
kb.cert.org
CERT/CC Vulnerability Note VU#763488
Memory corruption vulnerabilities in PHP
🔴 CVE Digest — 23 Oct 2026
7 critical vulnerabilities
🔴 CVE-2026-110243 · CVSS 9.9
The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface...
🔴 CVE-2026-107861 · CVSS 9.9
The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter...
🔴 CVE-2026-97785 · CVSS 10.0
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.
🔴 CVE-2026-83938 · CVSS 10.0
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker...
🔴 CVE-2026-110063 · CVSS 10.0
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an...
🔴 CVE-2026-109122 · CVSS 9.4
The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when...
🔴 CVE-2026-105014 · CVSS 9.1
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an...
#CVE #Critical #Vulnerability
7 critical vulnerabilities
🔴 CVE-2026-110243 · CVSS 9.9
The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface...
🔴 CVE-2026-107861 · CVSS 9.9
The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter...
🔴 CVE-2026-97785 · CVSS 10.0
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.
🔴 CVE-2026-83938 · CVSS 10.0
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker...
🔴 CVE-2026-110063 · CVSS 10.0
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an...
🔴 CVE-2026-109122 · CVSS 9.4
The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when...
🔴 CVE-2026-105014 · CVSS 9.1
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-110243 - Kiloview E3 NDI Encoder OS Command Injection
The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance address configuration endpoint before passing it to a shell command, unlike sibling handlers that perform…
🔍 Zero Day Initiative
ZDI-26-790: OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value Vulnerability
This vulnerability allows network-adjacent attackers to tamper with CMS AuthEnvelopedData messages on affected installations of OpenSSL. An attacker must first obtain the ability to modify CMS AuthEnvelopedData messages in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of...
#ZeroDay #Vulnerability
ZDI-26-790: OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value Vulnerability
This vulnerability allows network-adjacent attackers to tamper with CMS AuthEnvelopedData messages on affected installations of OpenSSL. An attacker must first obtain the ability to modify CMS AuthEnvelopedData messages in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of...
#ZeroDay #Vulnerability
🔍 Zero Day Initiative
ZDI-26-789: OpenSSL CMP Use of Externally-Controlled Format String Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenSSL. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-63073.
#ZeroDay #Vulnerability
ZDI-26-789: OpenSSL CMP Use of Externally-Controlled Format String Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenSSL. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-63073.
#ZeroDay #Vulnerability
🔍 Zero Day Initiative
ZDI-26-788: Cisco Snort OLE VBA Decompression Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Snort. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-20218.
#ZeroDay #Vulnerability
ZDI-26-788: Cisco Snort OLE VBA Decompression Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Snort. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-20218.
#ZeroDay #Vulnerability
🔍 Zero Day Initiative
ZDI-26-787: NVIDIA Megatron Bridge YAML File Parsing Code Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8....
#ZeroDay #Vulnerability
ZDI-26-787: NVIDIA Megatron Bridge YAML File Parsing Code Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8....
#ZeroDay #Vulnerability
🔍 Zero Day Initiative
ZDI-26-786: NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-114549.
#ZeroDay #Vulnerability
ZDI-26-786: NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-114549.
#ZeroDay #Vulnerability
🔴 CVE Digest — 23 Oct 2026
1 critical vulnerability
🔴 CVE-2026-19677 · CVSS 9.3
An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an...
#CVE #Critical #Vulnerability
1 critical vulnerability
🔴 CVE-2026-19677 · CVSS 9.3
An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-19677 - Authentication Bypass Leading to Server-Side Command Execution
An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthenticated remote attacker to authenticate as an arbitrary tenant user, obtain TenantAdmin and Designer privileges, and execute arbitrary…
📰 Dark Reading
State Bank of India Suffers a Customer PII Data Leak
Relatively small data breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII.
#CyberNews #Infosec
State Bank of India Suffers a Customer PII Data Leak
Relatively small data breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII.
#CyberNews #Infosec
Dark Reading
State Bank of India Suffers a Customer PII Data Leak
Relatively small breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII.
🔴 CVE Digest — 23 Oct 2026
1 critical vulnerability
🔴 CVE-2026-115547 · CVSS 9.1
An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of specially formatted...
#CVE #Critical #Vulnerability
1 critical vulnerability
🔴 CVE-2026-115547 · CVSS 9.1
An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of specially formatted...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-115547 - Command Execution via Admin Console Input in Okta Access Gateway
An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of specially formatted configuration values. An authenticated administrator can leverage this to execute system commands within the context of the OAG service account.
🔴 CVE Digest — 23 Oct 2026
1 critical vulnerability
🔴 CVE-2026-54630 · CVSS 9.6
Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part...
#CVE #Critical #Vulnerability
1 critical vulnerability
🔴 CVE-2026-54630 · CVSS 9.6
Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-54630 - Part-DB: Authenticated RCE via .phar attachment upload served from public/media
Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part attachment upload handler stores uploaded files under the web-served media directory using the client-supplied file extension, and its extension…
🔴 CVE Digest — 23 Oct 2026
2 critical vulnerabilities
🔴 CVE-2026-63244 · CVSS 9.8
An authentication
bypass vulnerability in WizLearn Technologies' Learning Management System (LMS)
could allow an...
🔴 CVE-2026-55981 · CVSS 9.6
A firmware verification vulnerability in Creative Sound
Blaster Katana could allow an attacker to modify a legitimate...
#CVE #Critical #Vulnerability
2 critical vulnerabilities
🔴 CVE-2026-63244 · CVSS 9.8
An authentication
bypass vulnerability in WizLearn Technologies' Learning Management System (LMS)
could allow an...
🔴 CVE-2026-55981 · CVSS 9.6
A firmware verification vulnerability in Creative Sound
Blaster Katana could allow an attacker to modify a legitimate...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-63244 - Authentication Bypass Vulnerability
An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request…