Telegram threat feed
Read public Telegram security channels right here, chat-style. Only text is shown — attachments are never opened. Posts are unverified claims; always check the original source.
Last updated
—
Channels online
8/8
Posts loaded
158
Posts last 24 h
70
CVEs mentioned
25
All channels
Combined live feed · 158 posts
Cyber Security News
Join the Upcoming ImmuniWeb Webinar: “AI in Penetration Testing: The Good, The Bad and The Ugly”. → Explore how AI is transforming penetration testing, discover real-world benefits & risks, earn CPE credits, learn about latest AI application testing approaches. ℹ️ Key Insights: ✔ Use of AI in pen testing: pitfalls, best practices ✔ Risks & benefits of AI-driven pen testing ✔ Testing LLMs for AI-specific vulnerabilities ✔ OWASP Top 10 for LLM applications and emerging attack vectors ✔ OWASP Top 10 for Agentic Applications ✔ Red teaming and Continuous Breach & Attack Simulation (CBAS) ✔ Legal and regulatory landscape of pen testing in 2026 ✔ Leveraging the MITRE ATT&CK Matrix for pen testing ✔ Continuous vs. one-time pen testing ✔ External vs. in-house pen testing ✔ ImmuniWeb pen testing products 📅 Date: September 24, 2026 🎤 Host: Dr. Ilia Kolochenko, Founder & Chief Architect at ImmuniWeb ✅ Registration → click here for personal access. ----- #ad #paidpromotion #sponsored @Cyber_Security_Channel
Cyber Security News
Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks On Wednesday, the US cybersecurity agency CISA added CVE-2025-25249 to its Known Exploited Vulnerabilities (KEV) catalog, urging federal agencies to patch it within three days, in line with BOD 26-04’s requirements. Cyber_Security_Channel
Cyber Security News
📊 15 Cyber Threat Trends Security Leaders Need to Watch in 2026 SOC teams are under pressure to move faster, but more attacks now hide inside trusted platforms, legitimate login flows, and everyday business processes. ANY.RUN’s new report highlights 15 trends making detection and response harder, including: 🔹 +483.7% growth in device code phishing 🔹 +437% increase in fake CAPTCHA attacks 🔹 +104.7% growth in ClickFix activity See where detection gaps are growing and what security leaders should prioritize next. 👉 Read the full report – tap here to access. ----- #ad #paidpromotion #sponsored @Cyber_Security_Channel
Cyber Security News
As of recently: Revolut Confirms Data Breach via Fake Government Requests British fintech Revolut confirmed a data breach after a fraudster used a spoofed government agency email domain to trick staff into handing over customer records. Exposed data included customers' names, birth dates, addresses, phone numbers, and copies of passports and driver's licenses. Revolut said a limited number of customers were hit, blocked the fraudulent address, and alerted law enforcement and regulators, adding that funds and systems remain secure. @Cyber_Security_Channel
Cyber Security News
Google Confirms Gemini Autonomously Hacked Three Companies During Security Testing Google confirmed its Gemini AI model autonomously breached the protected systems of three companies during red-team testing by security firm Irregular. In one case, Gemini simply guessed a set of leaked credentials to gain unauthorized access, marking the model's first known autonomous hacks. Irregular notified Google in late July, but the incidents stayed private until this week, when Google said Gemini had acted appropriately by halting each breach on its own. @Cyber_Security_Channel
Cyber Security News
North Korean Hackers Posed As Employers To Steal $11 Million In Crypto Security agencies from the US, Japan, Germany, and Australia warned that North Korean group WaterPlum poses as employers to target software developers and IT professionals worldwide. The group has infected more than 30,000 devices across over 100 countries. Operators have drained nearly $11 million in cryptocurrency from over 7,000 wallets, funneling the funds back to North Korea. Investigators found WaterPlum sharing infrastructure with North Korean IT workers embedded in corporate contracts. @Cyber_Security_Channel
Cyber Security News
🤝 Cyber Security News is looking for ADVERTISERS Our community is continuously growing and we are searching for exciting companies & products to share with our audience. Requirements to Qualify • Relevant to channels niche / industry • Long-term approach and collaboration mindset • $2,000+ monthly ad spend budget to invest in campaigns What We Offer • Exposure to 80,000+ community members • Personal success manager to scale your campaigns • Brand awareness, leads, sign-ups, customers, followers, etc. 📩 Contact for Partnership If you are serious about promoting your business, send us an introduction Email → cybersecnewsinfo@gmail.com Important Note Spots to become a sponsor are limited. Reach out before they fill up. (we only have 7 left) Let's talk soon! - - - - - @Cyber_Security_Channel
Cyber Security News
Researchers Used Claude to Hack Into OpenAI A three-person team at Hacktron AI used Anthropic's Claude Opus 5 to chain two vulnerabilities and breach OpenAI's systems under a bug bounty program. The exploit began with a memory flaw in the libheif image library, triggered by a malicious photo upload on OpenAI's forum, letting attackers hijack the server and seize employee ChatGPT and Codex accounts. Researchers disclosed the flaws, OpenAI patched them and paid a $6,500 bounty; the same exploit failed under Opus 4.8 but worked hours after Opus 5 launched. @Cyber_Security_Channel
Cyber Security News
OpenAI Disrupts Encryption Bypass Used to Steal AI Reasoning Data OpenAI disclosed that it disrupted a months-long campaign using a novel encryption bypass to extract protected AI reasoning data, without breaching its systems or databases. By late July, the company had identified roughly 15,000 suspicious accounts behind over 16,000 extraction prompts and fully shut down the operation. OpenAI linked a core cluster of the activity to individuals tied to Chinese AI rival Moonshot AI, though it offered no public technical evidence for the claim. @Cyber_Security_Channel
Cyber Security News
Google Freezes Open-Source Bug Bounty Program Over AI Slop Submissions Google paused its Open Source Software Vulnerability Rewards Program on October 1, citing a “significant rise” in automated, AI-generated bug reports. The company said most of these submissions were invalid or contained outright hallucinations, overwhelming the engineers and maintainers who had to review them. Google plans to resume the program with an update in early 2027 and is directing researchers to its other bug bounty programs meanwhile. @Cyber_Security_Channel
Cyber Security News
🚨 September Attacks US Security Teams Should Watch and Act on Now September campaigns targeted US organizations with session theft, trusted-tool abuse, hidden delivery, and real-time fraud. 🎯 Industries in focus: Technology, manufacturing, government, healthcare, and consulting. 🔹 CSuite: Steals Microsoft 365 sessions and compromises endpoints 🔹 IronToll: Uses 114 domains for payment phishing 🔹 Wazza: Hides phishing behind anti-bot filtering 🔹 TerminalFix: Delivers malware through trusted components Together, they enable account takeover, payment fraud, operational disruption, and costly response. 👉 See the attack chains, close critical gaps, and get actionable IOCs for faster response. Read now by clicking here for the full material. ----- #ad #paidpromotion #sponsored @Cyber_Security_Channel
BleepingComputer
OAuth grants pile up faster than you can review them. Here's how to keep up. OAuth grants create data highways between SaaS apps, AI agents, and other tools. And, they are multiplying faster than any security team can review them. As the recent Klue breach showed, attackers are taking notice and exploiting forgotten OAuth grants to gain access to corporate data. This article covers why OAuth risks are so hard [...] https://www.bleepingcomputer.com/news/security/oauth-grants-pile-up-faster-than-you-can-review-them-heres-how-to-keep-up/
The Hacker News
🛑 Japan's web data leaks are surging: 119 reported incidents in 2026 vs. 84 in all of 2025. 81 were disclosed since July. JPCERT/CC reports attackers abusing mobile app APIs and exploiting a Metabase SQL injection flaw. How most incidents began remains unclear. Read - https://thehackernews.com/2026/10/japan-sees-sharp-rise-in-web-data-leaks.html
BleepingComputer
Cisco warns of critical flaws allowing Nexus switch takeover Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary code with root privileges on Nexus switches. [...] https://www.bleepingcomputer.com/news/security/cisco-warns-of-critical-flaws-allowing-nexus-switch-takeover/
BleepingComputer
FakeGit malware campaign returns with 17,610 malicious GitHub repos More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer. [...] https://www.bleepingcomputer.com/news/security/fakegit-malware-campaign-returns-with-17-610-malicious-github-repos/
The Hacker News
⚡ ThreatsDay Bulletin: Malicious code, exposed tools, AI phishing, and criminals stealing from criminals. This week's 15 stories ↓ → Malicious editor themes + dev packages → C2 infrastructure traced → WhatsApp-delivered RAT → Ransomware extradition + affiliate betrayal → Medical device PQC gaps → Trusted-domain phishing + rogue RMM → File-upload flaws exploited for web shells → AI profiling users and non-users → Phishing targeting humans + AI agents → Insider sabotage leads to prison → Attacker toolkit left exposed → Weak cookies enable impersonation → Global scam-center crackdown Full ThreatsDay ↓ https://thehackernews.com/2026/10/threatsday-ransomware-affiliate.html
The Hacker News
🛑 China-linked hackers didn't just steal emails. They ran a web portal giving third parties access to stolen mail, the FBI says. Victims included government, police, and healthcare organizations in Southeast Asia. Their toolkit included 1,300+ scanning scripts. Read: https://thehackernews.com/2026/10/fbi-says-china-linked-hackers-ran.html
BleepingComputer
Low-cost Android phones ship with residential proxy malware A malware campaign dubbed 'Midnight Mimosa' has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install apps, perform ad fraud, and turn devices into residential proxies. [...] https://www.bleepingcomputer.com/news/security/low-cost-android-phones-ship-with-residential-proxy-malware/
BleepingComputer
Ransomware attack disrupts Japan's IDCF Cloud used by govt clients IDC Frontier, a major Japanese cloud and digital infrastructure company, disclosed that its IDCF Cloud service was targeted in a ransomware attack that caused an outage at a data center cluster serving the eastern part of the country. [...] https://www.bleepingcomputer.com/news/security/ransomware-attack-disrupts-japans-idcf-cloud-used-by-govt-clients/
BleepingComputer
FBI disrupts Chinese hacking tools used to breach critical infrastructure The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate two hacking tools, MicroScan and FishHub, used in attacks that breached critical infrastructure and other organizations worldwide. [...] https://www.bleepingcomputer.com/news/security/fbi-disrupts-chinese-hacking-tools-used-to-breach-critical-infrastructure/
vx-underground
> wake up > take a shit out > get out of bed > get on beep boop > President of the United States says I am an enemy
BleepingComputer
Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland The Pwn2Own Ireland 2026 hacking contest has concluded, with hackers collecting $1,262,000 in rewards after exploiting 98 zero-day flaws. [...] https://www.bleepingcomputer.com/news/security/hackers-earn-1262000-for-98-zero-days-at-pwn2own-ireland/
vx-underground
can someone telegram explain to me why i cant do long posts anymore if i attach a silly picture of a cat? is god punishing me
The Hacker News
🔥 FBI seized 7 domains tied to China-linked Flax Typhoon. The disrupted tools were used to scan critical infrastructure and, in some cases, infiltrate networks. One scanner, MicroScan, included 1,300+ vulnerability-testing scripts. Read: https://thehackernews.com/2026/10/fbi-seizes-7-domains-disrupts-flax.html
The Hacker News
‼️ Citrix patches another critical NetScaler flaw as three separate bugs face active exploitation. CVE-2026-107406 (CVSS 9.5) could enable RCE or DoS in affected SAML IdP/SP configurations. No evidence this flaw has been exploited. Read > https://thehackernews.com/2026/10/citrix-patches-critical-netscaler-flaw.html
The Hacker News
🚨 Fully patched. Hacked remotely. Three times. Three teams successfully demonstrated remote hacks against Google's Pixel 10 at Pwn2Own Ireland, earning $562,500 combined. The exploit details remain undisclosed. Read: https://thehackernews.com/2026/10/three-teams-demonstrate-remote-hacks-of.html
BleepingComputer
Citrix warns admins to patch new NetScaler RCE flaw immediately Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions. [...] https://www.bleepingcomputer.com/news/security/citrix-warns-admins-to-patch-new-netscaler-rce-flaw-immediately/
BleepingComputer
Microsoft: Outdated Windows devices will stop receiving security updates Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year's Windows Update certificate rotation. [...] https://www.bleepingcomputer.com/news/microsoft/microsoft-outdated-windows-devices-will-lose-security-protection-next-year/
BleepingComputer
Man admits to running network of 15,000 money mules for cybercriminals A Ukrainian-Russian dual citizen has pleaded guilty to running a massive money laundering operation that laundered millions for cybercriminals worldwide. [...] https://www.bleepingcomputer.com/news/security/ukrainian-russian-dual-citizen-admits-to-laundering-millions-for-cybercriminals/
The Hacker News
‼️ A GoBalance flaw lets attackers hijack .onion addresses without breaching servers. Just one public descriptor can expose a site's master key if it uses Tor-format keys. Dread and Omega have moved to new addresses. https://thehackernews.com/2026/10/gobalance-flaw-lets-attackers-hijack.html
The Hacker News
54% of organizations have no formal identity security program for AI agents. For human identities, that figure is just 23%. SailPoint's latest report exposes a widening gap between AI agent adoption and identity security maturity. Read more → https://thehackernews.com/2026/10/the-ai-velocity-paradox-why-security-is.html
The Hacker News
⚠️ China-linked Flax Typhoon exploited five flaws now added to CISA's KEV catalog. The flaws affect ProFTPD, ONLYOFFICE, Strapi, Apache Struts, and ISC BIND. U.S. federal agencies must patch or stop using affected software by October 11. Read → https://thehackernews.com/2026/10/flax-typhoon-exploits-five-flaws-as.html
The Hacker News
🚨 Attackers are exploiting two AhsayCBS flaws to deploy web shells and XMRig miners disguised as Microsoft Edge (edge.exe). Huntress says even the latest version, 10.3.4, remains vulnerable. Read about it here → https://thehackernews.com/2026/10/attackers-exploit-ahsaycbs-flaws-to.html
The Hacker News
‼️ Researchers have published a working exploit for an AnyDesk Linux flaw that can execute commands as root before connection approval. Called AnyPwn, the exploit targets version 8.0.2 via direct TCP port 7070. The flaw was fixed in 8.0.3. Details → https://thehackernews.com/2026/10/researchers-publish-working-exploit-for.html
BleepingComputer
Max severity SonicWall SMA1000 flaw now exploited in attacks Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago. [...] https://www.bleepingcomputer.com/news/security/max-severity-sonicwall-sma1000-flaw-now-exploited-in-attacks/
The Hacker News
⚡ Anthropic launches OSS Scanner, a free AI-powered vulnerability scanning service for open-source projects. Selected projects can opt in for periodic security scans, with fully AI-generated vulnerability reports that require no human review. Read → https://thehackernews.com/2026/10/anthropic-launches-free-ai.html
The Hacker News
🛑 TP-Link now faces lawsuits in 5 U.S. states. The latest four allege misleading router security claims and overstated separation from China. TP-Link denies the allegations. 21 state AGs have also raised concerns with the FCC over new router approvals. Read → https://thehackernews.com/2026/10/tp-link-sued-by-four-more-us-states.html
BleepingComputer
How to keep AI agents within their permissions AI agents can use valid credentials to perform actions beyond their assigned permissions, creating risks that traditional access controls may not prevent. Token Security explains how organizations can enforce agent-specific policies without sacrificing autonomy. [...] https://www.bleepingcomputer.com/news/security/how-to-keep-ai-agents-within-their-permissions/
🛡 Cybersecurity & Privacy 🛡 - News
🖋️ Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies 🖋️ The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added five security flaws to its Known Exploited Vulnerabilities KEV catalog, following their abuse by a Chinalinked threat actor known as Flax Typhoon. The vulnerabilities in question are listed below CVE20153306 CVSS score 10.0 An improper access control vulnerability in ProFTPD that could allow. 📖 Read more. 🔗 Via "The Hacker News" ---------- 👁️ Seen on @cibsecurity
🛡 Cybersecurity & Privacy 🛡 - News
🖋️ The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition 🖋️ As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The "Horizons of Identity Security" report from SailPoint highlights a critical velocity paradox, in which organizations invest in AIspeed business operations while continuing to rely on humanspeed security controls, creating a. 📖 Read more. 🔗 Via "The Hacker News" ---------- 👁️ Seen on @cibsecurity
🛡 Cybersecurity & Privacy 🛡 - News
🖋️ GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys 🖋️ A bug in GoBalance, a tool many darkweb sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then take that address over. Searchlight Cyber, which disclosed the flaw on October 8, says an attacker who recovers the key can redirect the site's visitors to a copy of the site they control. 📖 Read more. 🔗 Via "The Hacker News" ---------- 👁️ Seen on @cibsecurity
🛡 Cybersecurity & Privacy 🛡 - News
🖋️ Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own 🖋️ Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest pays researchers to show working exploits and passes the flaws to the vendors. One of the three Pixel exploits earned Ikotas Labs 300,000, the contest's top prize, and made the team the overall winner. Trend Micro's Zero. 📖 Read more. 🔗 Via "The Hacker News" ---------- 👁️ Seen on @cibsecurity
🛡 Cybersecurity & Privacy 🛡 - News
🖋️ Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments 🖋️ Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denialofservice DoS under certain conditions. "CVE2026107406 is a memory overflow vulnerability that may lead to remote code execution or denialofservice under specific configuration conditions," Citrix said. The vulnerability. 📖 Read more. 🔗 Via "The Hacker News" ---------- 👁️ Seen on @cibsecurity
🛡 Cybersecurity & Privacy 🛡 - News
📔 Wikimedia Says Rogue AI Agents Abused its Platforms 📔 Wikimedia says OpenAI agents performed unauthorized actions on its platforms, including edits to wikis. 📖 Read more. 🔗 Via "Infosecurity Magazine" ---------- 👁️ Seen on @cibsecurity
🛡 Cybersecurity & Privacy 🛡 - News
📔 Q3 2026 Sets New Record for Ransomware Attacks 📔 Comparitech observed 2627 claimed ransomware attacks in Q3, with critical sectors like finance, technology, education and healthcare experiencing significant increases. 📖 Read more. 🔗 Via "Infosecurity Magazine" ---------- 👁️ Seen on @cibsecurity
🛡 Cybersecurity & Privacy 🛡 - News
📔 UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group 📔 The UK, US and allies have issued an alert detailing malicious activity linked to Chinas Integrity Technology Group. 📖 Read more. 🔗 Via "Infosecurity Magazine" ---------- 👁️ Seen on @cibsecurity
🛡 Cybersecurity & Privacy 🛡 - News
📔 AI Training Critical as Governance Challenges Grow 📔 As AI adoption accelerates, ISACA is expanding its certification portfolio with a governancefocused credential designed to help professionals manage AI securely. 📖 Read more. 🔗 Via "Infosecurity Magazine" ---------- 👁️ Seen on @cibsecurity
🛡 Cybersecurity & Privacy 🛡 - News
🌊 10 Best Agentic AI SOC Platforms for 2026 🌊 Compare 8 best agentic SOC platforms for 2026. Pricing, integrations, compliance, and POC frameworks scored across 500 MDR deployments. Evaluate now. The post 10 Best Agentic AI SOC Platforms for 2026 appeared first on UnderDefense. 📖 Read more. 🔗 Via "UnderDefense" ---------- 👁️ Seen on @cibsecurity
🛡 Cybersecurity & Privacy 🛡 - News
🌊 Red Team Assessment: Scope, Process, Deliverables 🌊 In August 2026, the US Cybersecurity and Infrastructure Security Agency CISA published two red team assessments it ran at the same time, with similar tradecraft, against two critical infrastructure organizations. In both, the team reached full domain compromise and sensitive business systems. Only one of the two security operations centers SOCs noticed. According to CISAs The post Red Team Assessment Scope, Process, Deliverables appeared first on UnderDefense. 📖 Read more. 🔗 Via "UnderDefense" ---------- 👁️ Seen on @cibsecurity
BleepingComputer
Germany arrests alleged core Qilin ransomware member after extradition Germany has arrested a Russian national suspected of being a leading member of the Qilin ransomware group following extradition from Japan earlier this month. [...] https://www.bleepingcomputer.com/news/security/germany-arrests-alleged-core-qilin-ransomware-member-after-extradition/
The Hacker News
🚨 DarkSword's new P7 iOS variant goes beyond data theft. Its implant can extract iCloud Keychain and crypto wallet data, execute attacker commands, and poll for new commands every 15 seconds. Details: https://thehackernews.com/2026/10/p7-darksword-ios-exploit-kit-adds.html
🛡 Cybersecurity & Privacy 🛡 - News
🕵️♂️ Security Threats Don't Stop at the Office: Why Executives' Families Need Training Too 🕵️♂️ Those closest to executives must match their security postures because the weakest link in a family becomes the entry point for attacks. 📖 Read more. 🔗 Via "Dark Reading" ---------- 👁️ Seen on @cibsecurity
🛡 Cybersecurity & Privacy 🛡 - News
🖋️ P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands 🖋️ Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the variants we usually observe, P7 reduces its ondevice footprint, adds ondevice keychain and cryptowallet theft, and adds two way C2 communication with the attacker's infrastructure," iVerify said in a new report published Thursday. The name. 📖 Read more. 🔗 Via "The Hacker News" ---------- 👁️ Seen on @cibsecurity
BleepingComputer
FBI arrests another suspected ShinyHunters hacker after agency breach The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday. [...] https://www.bleepingcomputer.com/news/security/fbi-arrests-another-suspected-shinyhunters-hacker-after-agency-breach/
🛡 Cybersecurity & Privacy 🛡 - News
🕵️♂️ What We Missed: FBI Strikes Back at ShinyHunters 🕵️♂️ In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from the arrest of a suspected ShinyHunters operative to the compromise of a Pentagonrun data center. 📖 Read more. 🔗 Via "Dark Reading" ---------- 👁️ Seen on @cibsecurity
The Hacker News
‼️ BREAKING - FBI announces a third ShinyHunters-linked arrest made public since its jobs portal breach. The suspect is reportedly a Canadian detained in Pennsylvania, believed to have been directly involved in the hack. Details: https://thehackernews.com/2026/10/fbi-arrests-another-shinyhunters.html
BleepingComputer
Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners. [...] https://www.bleepingcomputer.com/news/security/unpatched-ahsaycbs-flaws-exploited-to-deploy-webshells-mine-crypto/
🛡 Cybersecurity & Privacy 🛡 - News
🖋️ FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack 🖋️ The FBI has arrested another suspected coconspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X. ShinyHunters is the extortion group that said in September it had breached the FBI's jobs portal and stolen sensitive data on almost all FBI agents and job applicants. The FBI has not named the suspect, and no charges have been made public. The. 📖 Read more. 🔗 Via "The Hacker News" ---------- 👁️ Seen on @cibsecurity
The Hacker News
🚨 More than 500 GitHub accounts committed credential-stealing Actions workflows to tens of thousands of repositories. Disguised as security audits, the malicious workflows harvest AWS keys, API tokens, and secrets from Git history. Read: https://thehackernews.com/2026/10/credential-stealing-github-actions.html
vx-underground
Thank you to ">_<" for gifting me the thingie I need to make long posts with a picture of a silly cat attached. I appreciate it.
🛡 Cybersecurity & Privacy 🛡 - News
🕵️♂️ AI Scramble Drives Cybersecurity M&A Boom 🕵️♂️ Welcome to another gangbuster year for strategic MA activity in cyber, with 117 deals announced in the latest quarter. What's different Many of the buyers are not your typical cybersecurity firms. 📖 Read more. 🔗 Via "Dark Reading" ---------- 👁️ Seen on @cibsecurity
🛡 Cybersecurity & Privacy 🛡 - News
🦿 AI Agents, Local Hardware, and Security Risks Reshape Tech 🦿 Explore the latest tech news, from ChatGPT's interactive AI tools and Microsoft's new hardware to cybersecurity threats, robotics, and Big Tech shakeups. The post AI Agents, Local Hardware, and Security Risks Reshape Tech appeared first on TechRepublic. 📖 Read more. 🔗 Via "Tech Republic" ---------- 👁️ Seen on @cibsecurity
BleepingComputer
Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks Hackers are abusing legitimate Bing search-result redirects as click URLs in Google search ads to direct users to fake Claude installers that deliver ClickFix attacks. [...] https://www.bleepingcomputer.com/news/security/hackers-abuse-google-ads-bing-redirects-to-push-claude-clickfix-attacks/
🛡 Cybersecurity & Privacy 🛡 - News
🕵️♂️ ASOS Breach Reveals the Risks in Customer-Facing SaaS 🕵️♂️ The attack on the British retailer shows that compromising a single identity can lead to much deeper penetration of the corporate network. 📖 Read more. 🔗 Via "Dark Reading" ---------- 👁️ Seen on @cibsecurity
🛡 Cybersecurity & Privacy 🛡 - News
♟️ FBI Arrests Founder of Ransomware Negotiation Firm ♟️ Agents with the Federal Bureau of Investigation FBI on Thursday arrested the cofounder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSecurity. 📖 Read more. 🔗 Via "Krebs on Security" ---------- 👁️ Seen on @cibsecurity
🛡 Cybersecurity & Privacy 🛡 - News
🖋️ Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories 🖋️ Cybersecurity researchers have disclosed details of an ongoing credentialtheft campaign that has compromised two highprofile opensource maintainer accounts to push a malicious workflow into over 340 repositories. "Using the account of Takashi Kitao, author of the 18,400star game engine pyxel, the attacker pushed a malicious workflow to 27 repositories starting at 1320 UTC," StepSecurity. 📖 Read more. 🔗 Via "The Hacker News" ---------- 👁️ Seen on @cibsecurity
vx-underground
> be me > get dm > "smelly i found goop" > wtf i love goop (malware) > "It's malware masquerading as an ATM software update. The malware is targeting ATMs"
vx-underground
> be me > get dm > "smelly i found goop" > wtf i love goop (malware) > "It's malware masquerading as an ATM software update. The malware is targeting ATMs"
vx-underground
> be me > get dm from malwrhunterteam > "smelly, i found goop" > wtf i love goop (malware) > he didn't actually say that > i'm only saying that for consistency > "Found a fake POS update domain, I can't remember the last time I heard malware specifically targeting a POS system" > "smica83 saved it, uploaded it to MalwareBazaar" > ok > download file > look inside > POS_System_Update.msi > open in Orca > tool used for examining .msi installer thingies > .msi extracts .dll from itself > executes function inside .msi called EdgeUpdateMain > image 1 > open in Ida > lots of string stuff > registers machine based off of stuff > sends request to fake POS website > toastposupdate(.)com > expects specific user-agent to connect > opbZMeJMJZmmveM7Nnck3g > image 2 > can accept commands from web server > can "db_dump", "ram_scrape", "intercept" > db_dump dumps everything from POS DB > ram_scrape pulls credit-cards out of memory > intercept looks for other POS terminals > image 3 This code is strange because it isn't obfuscated at all. Additionally, it is inconsistent with some of its functionality. In some segments it used the WinAPI to perform web requests with WinHTTPConnect, WinHTTPOpenRequ
Cyber Security News
Hackers Steal Records of 8 Million Citizens From Danish Government Database Attackers abused a Danish company's lawful access to the Central Person Register, stealing names, addresses, and ID numbers of roughly 8 million citizens and residents. The breach happened in September but wasn't found until October 2, and the government confirmed it as Denmark's largest data breach on record. Minister Christina Egelund called it a serious incident, noting the exposure also includes citizens living abroad and the deceased, with no attacker yet named. @Cyber_Security_Channel
The Hacker News
🛑 During internal tests, Claude Mythos Preview exploited injection flaws to run commands on a university server. Claude Haiku 4.5 sent a false homicide tip to Philadelphia police. Anthropic is cutting live internet access for all internal evaluations. Read: https://thehackernews.com/2026/10/anthropic-cuts-live-internet-access-for.html
The Hacker News
Nearly 1,000 of roughly 1,280 third-party products embedding AI were not behind SSO in environments studied for a 2026 report. The blind spot: AI agents can enter through existing enterprise software without a separate security review. Here's what security teams need to know → https://thehackernews.com/2026/10/the-third-party-agent-problem-why.html
BleepingComputer
Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management Traditional attack surface management helps organizations discover exposed assets, but visibility alone is not enough to address threats. Criminal IP introduces AITEM, an AI-powered approach that connects exposure discovery with investigation, risk prioritization, and response. [...] https://www.bleepingcomputer.com/news/security/criminal-ip-introduces-aitem-as-the-next-evolution-of-attack-surface-management/
BleepingComputer
ARTEX AI, Claude agents used in cyberattacks on South Korean banks The cyberattacks that shook the South Korean financial sector earlier this month were launched by a Chinese hacker using the ARTEX AI penetration testing suite and Claude agents. [...] https://www.bleepingcomputer.com/news/security/hacker-used-artex-ai-and-claude-agents-to-target-south-korean-banks/
BleepingComputer
Cyber exec arrested in case allegedly tied to ShinyHunters hackers Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania in connection with alleged extortion activity that multiple reports have linked to the FBI's ongoing crackdown on the ShinyHunters hacking group. [...] https://www.bleepingcomputer.com/news/security/cyber-exec-arrested-in-case-allegedly-tied-to-shinyhunters-hackers/
vx-underground
Hello Little People Living Inside My Computer, I have a lot of goop to push to the internet. However, I am extremely busy this weekend and very AFK. Tomorrow evening there will be lots of malware uploaded to the internet for you to share with your friends, family, and co-workers. As my son ages he becomes more and more time consuming. I'm not complaining about that, it's a lot of fun, we stack blocks and scream at Mom (I have no idea why still). But, it greatly reduces my time to work on goop. Anyway, goop tomorrow. I love you truck unrelated
vx-underground
> be me > get dm > "smelly, i found goop" > wtf i love goop (malware) > weird .vbs file sent > "RateConfirmation.vbs" > hmmm > download > look inside > shrimple file loader > downloads "grape" .zip from funny domain > download grape zip file > NodeJS electron goop > masquerading as Grape Electron > weird project on GitHub, legit tho > weird outdated thingie called ChatGrape > last update 5 years ago > ??? > exact same source code as ChatGrape on GitHub > index.js (start of program) modified > does malware stuff > launches ChatGrape regularly afterward > malware appears to try targeting UniWays > small to medium size company > freight and transportation company > covers 48/50 states in US (no alaska or hawaii) > hmmm > see C2 > uniwaysllc(.)com > code sent POST request to C2 > code waits for response > hmmmm weird > try to manually contact C2 > nothing happens > try again > nothing happens > looks like malware operator manually reviewing incoming connections wtf? is this goop is targeting freight and transportation companies? thats awfully suspicious because last time on dragon ball z (if youve been paying attention to my goop posts) we saw a very, very similar goop doing masquerad
vx-underground
> be me > get dm > "smelly, i found goop" > wtf i love goop (malware) > weird .vbs file sent > "RateConfirmation.vbs" > hmmm > download > look inside > shrimple file loader > downloads "grape" .zip from funny domain > download grape zip file > NodeJS electron…
vx-underground
> be me > get dm > "smelly, i found goop" > wtf i love goop (malware) > weird .vbs file sent > "RateConfirmation.vbs" > hmmm > download > look inside > shrimple file loader > downloads "grape" .zip from funny domain > download grape zip file > NodeJS electron…
vx-underground
Someone sent me some really fucking annoying goop. The malware (maybe accidentally?) infected a healthcare facility. The malware was sent to a healthcare worker from a trusted individuals compromised email. Hence, they did not suspect it to be malicious. The malware has several different stages, it ultimately is a malicious Control Panel Applet, and it's written in Go Really weird goop, can't find any known malware campaigns that fit the criteria for this malware. I'm not sure if it's a new malware campaign, an enhancement (or modification) of an existing one, or if it's a special goop. It's really annoying though, it is Go stripped to the bare ass cheeks, but has a bunch of junk and bullshit dependencies it doesn't use, ... It just sucks. Not a fan of this goop. The C2 it connects to isn't flagged by any AVs yet. I need to finish bonking it, but holy cannoli is this goop annoying
Ransomlook.io
hsc.mb.ca By inc ransom Ransom post image 🖼️ https://www.ransomlook.io//group/inc%20ransom
Ransomlook.io
Company #25 By n0n Ransom post image 🖼️ https://www.ransomlook.io//group/n0n
Ransomlook.io
Company #26 By n0n Ransom post image 🖼️ https://www.ransomlook.io//group/n0n
Ransomlook.io
Company #27 By n0n Ransom post image 🖼️ https://www.ransomlook.io//group/n0n
Ransomlook.io
Company #28 By n0n Ransom post image 🖼️ https://www.ransomlook.io//group/n0n
Ransomlook.io
Company #29 By n0n Ransom post image 🖼️ https://www.ransomlook.io//group/n0n
Ransomlook.io
Kookabarra Juice By vexy Ransom post image 🖼️ https://www.ransomlook.io//group/vexy
BleepingComputer
Nippon Columbia malware incident exposes 8.6 million karaoke fan records Daiichi Kosho, a major Japanese entertainment system maker, disclosed that a malware infection at its contractor, Nippon Columbia, exposed more than 8.7 million customer and employee records. [...] https://www.bleepingcomputer.com/news/security/nippon-columbia-malware-incident-exposes-86-million-karaoke-fan-records/
Ransomlook.io
Reed & Giordano PA By rhysida Ransom post image 🖼️ https://www.ransomlook.io//group/rhysida
vx-underground
Honestly bro, if you really want to learn about goop, I'd recommend just reading over MITRE ATT&CK. MITRE ATT&CK basically documents known attacker techniques (especially in regards to malware). I think it's a good starting point because it introduces you to goop theory rather than diving directly into the trenches of malware code. If you don't know what goop can do, then you won't have any idea what the goop is trying to accomplish. If you understand what goop can do, will do, or wants to accomplish, writing goop or reverse engineering goop is substantially easier. Skim through MITRE ATT&CK, see if anything sticks out and seems interesting, and read it. If you don't understand it, ask Mr. AI what it means and unironically have a conversation with Mr. AI about what it means and how it works. If you think it's boring, or still too complicated, stop reading it. Goop is supposed to be fun. If you're bored from it, or if it still seems too complicated, you might not be ready for that particular set of information, and that's okay. When you read about the goop, you should be so excited by how cool it is, you should want to call your Mom on the phone and tell her all about it (she's
vx-underground
Good news for malware enjoyers I've uploaded another 159,000 malwares to the internet. It is free to download and share with friends, family, neighbors, co-workers, and even the people who deliver you the mail Bonus content: AI decodes the thoughts of cats (real and true)
Ransomlook.io
Company #14 By n0n Ransom post image 🖼️ https://www.ransomlook.io//group/n0n
Ransomlook.io
Company #19 By n0n Ransom post image 🖼️ https://www.ransomlook.io//group/n0n
Ransomlook.io
Company #20 By n0n Ransom post image 🖼️ https://www.ransomlook.io//group/n0n
Ransomlook.io
Company #21 By n0n Ransom post image 🖼️ https://www.ransomlook.io//group/n0n
Ransomlook.io
Company #22 By n0n Ransom post image 🖼️ https://www.ransomlook.io//group/n0n
Ransomlook.io
Company #23 By n0n Ransom post image 🖼️ https://www.ransomlook.io//group/n0n
vx-underground
Lots of yapping online about AI vibe nerds making open source alternatives to Adobe Photoshop. Goobers are saying Adobe is finished My Brother in Christ, free and open source alternatives have existed for decades. Where have you been?
vx-underground
Lots of yapping online about AI vibe nerds making open source alternatives to Adobe Photoshop. Goobers are saying Adobe is finished My Brother in Christ, free and open source alternatives have existed for decades. Where have you been?
Ransomlook.io
Company #24 By n0n Ransom post image 🖼️ https://www.ransomlook.io//group/n0n
Ransomlook.io
Spelman Logistics By emperador Ransom post image 🖼️ https://www.ransomlook.io//group/emperador
vx-underground
Lots of yapping online about AI vibe nerds making open source alternatives to Adobe Photoshop. Goobers are saying Adobe is finished My Brother in Christ, free and open source alternatives have existed for decades. Where have you been?
Ransomlook.io
KP Industries By nightspire Ransom post image 🖼️ https://www.ransomlook.io//group/nightspire
Ransomlook.io
MGT Lojistik AŞ By nightspire https://www.ransomlook.io//group/nightspire
vx-underground
If you look into a mirror, turn off the lights, and say Ayy Eye three times slowly, an Ayy Eye nerd will appear behind you to lecture on you on something I don't dare write the actual letters for Ayy Eye. They'll be brought forth from the pits of Xitter hell to mention SpaseEx, Tebla, AyyEye futures, SlyptoCurrencee, AnnieThropic, OpenAyyEye, or the infamous Exodia (all 5 parts can summon the forbidden one)
vx-underground
> be me > get dm > "smelly, i found goop" > wtf i love goop (malware) > "My spouses work, a healthcare clinic, has been infected by malware. It arrived as a .rev file" > lol ok > download > look inside > .rar file named .rev > ok nbc > extract content from rar > control panel applet > lol is it 2002? > look inside > malware written in Go > spend forever decoding what is goop code or go code > 8 hours in > deeply rustled > Go goop has .svg document inside it > goop compromises pcs > uses .svg inside of it > goop owners steal da emails on pc > send .svg from goop to other ppls emails > .svg inside tells ppl to download a .rev file > goop propagation with social engineering > neat > keep bonking > goop establishes connection with ip address > 85.192.30.227 > not flagged by AVs > goop first seen connecting to IP 2026-09-20 > sort of new goop maybe? > keep bonking goop > goop talks to ip address in funny way > confuse me > goop takes funny talk and determines what to do > goop is told by ip to do stuff > have goop transfer / upload files to ip or infected pc > have goop start processes > have goop update itself to latest version > keep bonking > finally discover the goop > Dark Caracal
Ransomlook.io
Eversource Energy By redact Ransom post image 🖼️ https://www.ransomlook.io//group/redact
The Hacker News
🚨 51 Claude Code agents. 429 WordPress admin panels accessed. 32 web shells deployed in just 61 seconds. SOCRadar links the campaign to CyberXero, which also stole over 628,000 records from four Ukrainian organizations. Read: https://thehackernews.com/2026/10/cyberxero-uses-claude-code-in-campaign.html
CVE Notify
🚨 CVE-2026-107432 Missing Authorization vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event post: from n/a through 6.1.1. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-108810 A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument _func results in information disclosure. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.5.3 is recommended to address this issue. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-108813 A vulnerability was detected in SEMCMS up to 5.0. This affects an unknown function of the file SEMCMS_Download.php. Performing a manipulation results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-108812 A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file /admin/SEMCMS_User.php?Class=Deleted&CF=user. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-108811 A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php. This manipulation of the argument path/file causes information disclosure. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-108814 A flaw has been found in SEMCMS up to 5.0. This impacts an unknown function of the file SEMCMS_Banner.php. Executing a manipulation can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 🎖@cveNotify
RansomfeedNews
ID: 36853 ⚠ Mon, 12 Oct 2026 02:39:33 GMT 🥷 thegentlemen 🎯 Confluent, USA 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36853
RansomfeedNews
ID: 36854 ⚠ Mon, 12 Oct 2026 02:39:54 GMT 🥷 thegentlemen 🎯 BigID, USA 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36854
RansomfeedNews
ID: 36855 ⚠ Mon, 12 Oct 2026 02:40:15 GMT 🥷 thegentlemen 🎯 Placer AI, USA 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36855
RansomfeedNews
ID: 36851 ⚠ Mon, 12 Oct 2026 02:38:52 GMT 🥷 thegentlemen 🎯 KFC, USA 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36851
RansomfeedNews
ID: 36852 ⚠ Mon, 12 Oct 2026 02:39:12 GMT 🥷 thegentlemen 🎯 MoneyGram, USA 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36852
RansomfeedNews
ID: 36849 ⚠ Sun, 11 Oct 2026 23:18:12 GMT 🥷 nightspire 🎯 MGT Lojistik AŞ, Turkey 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36849
RansomfeedNews
ID: 36850 ⚠ Mon, 12 Oct 2026 01:23:11 GMT 🥷 Redact 🎯 Eversource Energy, USA 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36850
RansomfeedNews
ID: 36846 ⚠ Sun, 11 Oct 2026 18:53:02 GMT 🥷 N0n 🎯 Company #24, USA 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36846
RansomfeedNews
ID: 36847 ⚠ Sun, 11 Oct 2026 20:21:27 GMT 🥷 emperador 🎯 Spelman Logistics, Canada 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36847
RansomfeedNews
ID: 36848 ⚠ Sun, 11 Oct 2026 23:17:49 GMT 🥷 nightspire 🎯 KP Industries, UK 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36848
RansomfeedNews
ID: 36845 ⚠ Sun, 11 Oct 2026 18:21:17 GMT 🥷 BrainCipher 🎯 huntcompanies.com, USA 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36845
RansomfeedNews
ID: 36841 ⚠ Sun, 11 Oct 2026 16:54:28 GMT 🥷 N0n 🎯 Company #20, USA 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36841
RansomfeedNews
ID: 36842 ⚠ Sun, 11 Oct 2026 16:55:04 GMT 🥷 N0n 🎯 Company #21, Australia 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36842
RansomfeedNews
ID: 36843 ⚠ Sun, 11 Oct 2026 16:55:38 GMT 🥷 N0n 🎯 Company #22, USA 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36843
RansomfeedNews
ID: 36844 ⚠ Sun, 11 Oct 2026 16:56:11 GMT 🥷 N0n 🎯 Company #23, USA 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36844
RansomfeedNews
ID: 36838 ⚠ Sun, 11 Oct 2026 13:28:31 GMT 🥷 rhysida 🎯 Reed AND Giordano PA, USA 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36838
RansomfeedNews
ID: 36839 ⚠ Sun, 11 Oct 2026 16:53:20 GMT 🥷 N0n 🎯 Company #14, Canada 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36839
RansomfeedNews
ID: 36840 ⚠ Sun, 11 Oct 2026 16:53:54 GMT 🥷 N0n 🎯 Company #19, USA 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36840
RansomfeedNews
ID: 36836 ⚠ Sun, 11 Oct 2026 12:24:16 GMT 🥷 N0n 🎯 Company #28, USA 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36836
RansomfeedNews
ID: 36837 ⚠ Sun, 11 Oct 2026 12:24:49 GMT 🥷 N0n 🎯 Company #29, USA 🔗 http://www.ransomfeed.it/index.php?page=postdetails&idpost=36837
The Hacker News
⚠️ No login required. CVSS 10.0. Active exploitation. Attackers are exploiting a Bricksforge WordPress flaw (CVE-2026-85097) that enables arbitrary PHP code execution through crafted file-upload metadata. Patchstack observed attack activity from 63 IPs. Update to version 4.0.1. Read - https://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.html
CVE Notify
🚨 CVE-2025-10162 The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin through 15.1 does not validate the path of files to be downloaded, which could allow unauthenticated users (before version 15.0) and any authenticated user such as a Subscriber (versions 15.0 to 15.1) to read arbitrary files on the server via a path traversal attack; the fix released in version 14 was incomplete and no fixed version is available. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-107863 Missing Authorization vulnerability in Codection Products Restricted Users for WooCommerce woo-products-restricted-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Products Restricted Users for WooCommerce: from n/a through 0.7. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-107423 Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.22. 🎖@cveNotify
CVE Notify
🚨 CVE-2023-25996 Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce booster-elite-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Booster Elite for WooCommerce: from n/a before 8.4.0. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-107864 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inserter ad-inserter allows Stored XSS.This issue affects Ad Inserter: from n/a through 2.8.18. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-107866 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.3. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-107865 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetMenu jet-menu allows Stored XSS.This issue affects JetMenu: from n/a through 3.0.5. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-108168 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DLX Plugins Custom Query Blocks post-type-archive-mapping allows Stored XSS.This issue affects Custom Query Blocks: from n/a through 5.6.0. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-107869 Missing Authorization vulnerability in WP Desk Flexible Subscriptions flexible-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Subscriptions: from n/a through 1.8.4. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-108815 A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/member_deal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-108816 A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the component PythonTools. The manipulation of the argument code results in code injection. The attack can be launched remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-108818 A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependency of the file auth.py. Such manipulation of the argument security_key leads to missing authentication. The attack may be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-108817 A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run_shell in the library libs/agno/agno/tools/coding.py of the component CodingTools. This manipulation of the argument command causes os command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.0.10 can resolve this issue. Patch name: ed64fab5be63d2b15faddc2ef7c733176daa14aa. You should upgrade the affected component. 🎖@cveNotify
CVE Notify
🚨 CVE-2026-1907 A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operating in Hybrid Mode. The issue can be triggered by sending specially crafted RPC requests to the Control Plane (CP), leading to potential unauthorized database access. Leveraging the issue requires network access to the Control Plane’s clustering port and a valid client certificate and key. 🎖@cveNotify