Tag: vulnerability
-
OpenAI raises top bug bounty payout to $172,000 with bonuses
OpenAI increased its security bug bounties to encourage independent researchers to find vulnerabilities in its software. The program now offers bonuses for high-quality … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/03/openai-bigger-bug-bounty-rewards/
-
Hackers Exploit Critical Magento StyleSmuggler Vulnerability to Deploy PSK Agent RAT and Hijack Servers
Attackers exploited the critical StyleSmuggler vulnerability in Magento and Adobe Commerce to deploy PSK Agent, a remote access trojan enabling command execution, traffic proxying, and persistent server access. The campaign ran September 913, 2026, targeting stores across Western Europe, North America, and Asia-Pacific. Imperva’s earlier analysis reports a CVSS score of 10.0 and exploitation preceding…
-
Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
Synology is urging customers to update the DiskStation Manager (DSM) software powering its Network Attached Storage (NAS) devices following ransomware attacks.The Taiwanese vendor said it observed threat actors exploiting a vulnerability patched in December 2024 to target devices running outdated versions of DSM.”These attacks aim to encrypt data and extort ransom,” it said in a…
-
Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
Synology is urging customers to update the DiskStation Manager (DSM) software powering its Network Attached Storage (NAS) devices following ransomware attacks.The Taiwanese vendor said it observed threat actors exploiting a vulnerability patched in December 2024 to target devices running outdated versions of DSM.”These attacks aim to encrypt data and extort ransom,” it said in a…
-
Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
Synology is urging customers to update the DiskStation Manager (DSM) software powering its Network Attached Storage (NAS) devices following ransomware attacks.The Taiwanese vendor said it observed threat actors exploiting a vulnerability patched in December 2024 to target devices running outdated versions of DSM.”These attacks aim to encrypt data and extort ransom,” it said in a…
-
5-Year-Old Linux Kernel Vulnerability Allows Unprivileged Attackers to Gain Root Access
A Linux kernel flaw that sat unnoticed for nearly five years can let an unprivileged local user take full root control of a system. Tracked as CVE-2026-31695, the bug was found and fixed by researcher Alexander Popov. He has now published a working exploit against a default Fedora 44 Server install on x86_64. The full…
-
What human hackers still do better than AI, according to HackerOne’s CEO
AI can find vulnerabilities in minutes, but people still hold the edge in judging what a flaw means for a business. In this Help Net Security interview, Kara Sprague, CEO of … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/03/kara-sprague-hackerone-ai-bug-bounty/
-
Google Offers $250,000 Bug Bounty for Full Google Cloud Project Takeover Vulnerabilities
Google has announced a $250,000 reward, called the >>Root-in-Cloud<< program, for researchers who can demonstrate complete administrative takeover of arbitrary Google Cloud projects or organizations without prior access. Google announced the initiative on October 30 to address architectural vulnerabilities that could compromise tenant isolation or cause harmful interactions between cloud services. The program emphasizes research…
-
Google Offers $250,000 Bug Bounty for Full Google Cloud Project Takeover Vulnerabilities
Google has announced a $250,000 reward, called the >>Root-in-Cloud<< program, for researchers who can demonstrate complete administrative takeover of arbitrary Google Cloud projects or organizations without prior access. Google announced the initiative on October 30 to address architectural vulnerabilities that could compromise tenant isolation or cause harmful interactions between cloud services. The program emphasizes research…
-
Critical Langflow AI Vulnerabilities Allow Hackers to Execute Remote Code Without Authentication
IBM has disclosed seven vulnerabilities in Langflow OSS, including critical flaws such as authentication bypass and code injection that attackers can exploit remotely without credentials. The bulletin addresses Langflow versions 1.0.0 through 1.12.8 and advises administrators to upgrade to version 1.13.0. According to IBM’s security bulletin, published October 28 and updated October 29, the vulnerabilities…
-
Critical Langflow AI Vulnerabilities Allow Hackers to Execute Remote Code Without Authentication
IBM has disclosed seven vulnerabilities in Langflow OSS, including critical flaws such as authentication bypass and code injection that attackers can exploit remotely without credentials. The bulletin addresses Langflow versions 1.0.0 through 1.12.8 and advises administrators to upgrade to version 1.13.0. According to IBM’s security bulletin, published October 28 and updated October 29, the vulnerabilities…
-
Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
A maximum-severity security flaw impacting Siemens SIMATIC IoT2050 Advanced devices has come under active exploitation, VulnCheck has revealed.The vulnerability, tracked as CVE-2026-58115 (CVSS score: 10.0), is a case of missing authentication for a critical function that could be exploited by an unauthenticated remote attacker to run arbitrary code.”SIMATIC IoT2050 Advanced devices running First seen on…
-
Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
Threat actors are attempting to exploit an unpatched maximum-severity security vulnerability in the CryptoPayment Gateway WordPress plugin, according to findings from Defused Cyber.The vulnerability in question is CVE-2026-81648, which carries a CVSS score of 10.0. Successful exploitation of the flaw could permit unauthenticated users to delete arbitrary files on the server and extract First seen…
-
Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
Threat actors are attempting to exploit an unpatched maximum-severity security vulnerability in the CryptoPayment Gateway WordPress plugin, according to findings from Defused Cyber.The vulnerability in question is CVE-2026-81648, which carries a CVSS score of 10.0. Successful exploitation of the flaw could permit unauthenticated users to delete arbitrary files on the server and extract First seen…
-
CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)
CISA added two new Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) to its Known Exploited Vulnerabilities catalog on Friday, after Ivanti updated an … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/02/cisa-to-federal-agencies-remediate-exploited-ivanti-connect-secure-vulnerabilities-cve-2026-111357-cve-2026-118527/
-
CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)
CISA added two new Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) to its Known Exploited Vulnerabilities catalog on Friday, after Ivanti updated an … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/02/cisa-to-federal-agencies-remediate-exploited-ivanti-connect-secure-vulnerabilities-cve-2026-111357-cve-2026-118527/
-
CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)
CISA added two new Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) to its Known Exploited Vulnerabilities catalog on Friday, after Ivanti updated an … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/02/cisa-to-federal-agencies-remediate-exploited-ivanti-connect-secure-vulnerabilities-cve-2026-111357-cve-2026-118527/
-
Arctic Wolf CEO Nick Schneider: AI, Vulnerability Threats Changing In 2027
As 2027 approaches, we have every reason to expect that AI-driven exploitation of vulnerabilities will be ‘more of the norm than the exception,’ Arctic Wolf CEO Nick Schneider says during the latest episode of CRN’s Security or Else! podcast. First seen on crn.com Jump to article: www.crn.com/news/security/2026/arctic-wolf-ceo-nick-schneider-ai-vulnerability-threats-changing-in-2027
-
Bei SAP-Schwachstellen schrumpft die Zeit bis zum Exploit auf wenige Tage
Das Zeitfenster zwischen der Veröffentlichung von SAP-Sicherheitsupdates und dem ersten nachgewiesenen Exploit beziehungsweise einem öffentlichen Proof of Concept wird immer kürzer. Laut einer neuen Untersuchung von Onapsis und Recorded Future sank der Median von 489 Tagen bei den im Jahr 2021 gepatchten Schwachstellen auf nur noch 1 bis 3 Tage bei den in den Jahren…
-
Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers
Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week.Langflow is an open-source tool for building AI agents and workflows, and its vulnerability reports go to IBM. Every release from 1.0.0 through 1.12.8 has the flaws, and the only fix is version…
-
Over 1,000 GitLab servers vulnerable to ongoing RCE attacks
Tags: attack, data-breach, exploit, flaw, gitlab, Internet, rce, remote-code-execution, vulnerabilityOver 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/over-1-000-gitlab-servers-vulnerable-to-code-execution-attacks/
-
Unpatchable Hardware Flaws in Older iPhones Allow Attackers to Steal Crypto Wallet Recovery Phrases
Older iPhones that store cryptocurrency recovery phrases are at a continuous security risk due to unpatchable BootROM vulnerabilities, even if the devices are wiped and kept in airplane mode. While attackers require physical access to exploit this vulnerability, doing so does not automatically reveal encrypted wallet data. However, other weaknesses could potentially allow them to…
-
Hacktober 2026: Major Cyberattacks Hit Binance, PHP, Node.js, LiteLLM, and Pentagon
October’s cybersecurity disclosures spanned cryptocurrency platforms, developer infrastructure, certificate authorities, government records, gaming accounts, and retail operations. Dubbed Hacktober, the wave included unrelated incidents rather than a single coordinated campaign. Confirmed breaches, malicious releases, vulnerable configurations, and possible credential exposure require separate treatment, particularly where discovery dates differ from intrusion timelines. Cryptocurrency Platforms Face Different…
-
Kritische SQLSchwachstelle – Angreifer können in Arista VeloCloud Operator-Rechte erlangen
First seen on security-insider.de Jump to article: www.security-insider.de/arista-velocloud-orchestrator-sql-injection-aktiv-ausgenutzt-a-064bc87026f6f5cf478281e49225e446/
-
Critical Incus and LXD Vulnerabilities Allow Unauthenticated Attackers to Gain Full Cluster Access
Critical certificate-validation vulnerabilities have been identified in Incus and Canonical LXD, allowing unauthenticated attackers to impersonate trusted identities and compromise management infrastructure. Exploitation of these vulnerabilities requires network access to the HTTPS listener but does not require valid credentials or the private key for a trusted certificate. This LXD vulnerability may expose entire clusters and…
-
Critical Incus and LXD Vulnerabilities Allow Unauthenticated Attackers to Gain Full Cluster Access
Critical certificate-validation vulnerabilities have been identified in Incus and Canonical LXD, allowing unauthenticated attackers to impersonate trusted identities and compromise management infrastructure. Exploitation of these vulnerabilities requires network access to the HTTPS listener but does not require valid credentials or the private key for a trusted certificate. This LXD vulnerability may expose entire clusters and…
-
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 6
Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can automate tasks, analyze large amounts of data, discover vulnerabilities and accelerate offensive operations. At…
-
Alpine Linux rebuilds GitLab after attempted RCE attack
Tags: attack, exploit, gitlab, hacker, infrastructure, linux, open-source, password, rce, remote-code-execution, vulnerabilityHackers attempted to exploit a critical GitLab vulnerability in Alpine Linux’s development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/alpine-linux-rebuilds-gitlab-after-attempted-rce-attack/
-
Security Affairs newsletter Round 602 by Pierluigi Paganini INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. U.S. CISA adds Ivanti Connect Secureflaws to its Known Exploited Vulnerabilities catalog Attackers Exploit Critical Drupal Commerce…