Information security
Information security
[ follow ]
#nginx
Information security
fromThe Hacker News
17 hours agoNGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE
CVE-2026-42945 in NGINX heap overflow is actively exploited, enabling unauthenticated worker crashes and potential RCE when ASLR is disabled and specific configuration is known.
#data-breach
Information security
fromSecurityWeek
2 days agoIn Other News: Big Tech vs Canada Encryption Bill, Cisco's Free AI Security Spec, Audi App Flaws
GeForce NOW user data was exposed via a partner breach, while the FCC extended update timelines for covered foreign routers and OpenAI sought EU access to a cyber-focused GPT variant.
fromSecurityWeek
4 hours agoHackers Earn $1.3 Million at Pwn2Own Berlin 2026
According to TrendAI's Zero Day Initiative (ZDI), white hat hackers have been awarded $1,298,250 for 47 unique vulnerabilities. Nearly $750,000 of the total amount was won by the first two teams: Devcore and StarLabs SG. The two teams also received the highest payouts for a single exploit chain. Devcore earned $200,000 for a remote code execution exploit with System privileges on Microsoft Exchange, and $175,000 for a Microsoft Edge sandbox escape. It also received $100,000 for exploiting Microsoft SharePoint.
Information security
Information security
fromThe Hacker News
1 day agoGrafana GitHub Token Breach Led to Codebase Download and Extortion Attempt
An unauthorized party accessed Grafana’s GitHub environment via a stolen token, downloaded code, attempted extortion, and Grafana invalidated credentials and added security measures.
Information security
fromTNW | Data-Security
23 hours agoA student with a laptop and a radio stopped four high-speed trains. The crypto keys hadn't been changed in 19 years.
A university student used cloned TETRA emergency signaling to trigger manual braking across Taiwan’s high-speed rail network, disrupting service for 48 minutes.
#ransomware
Information security
fromwww.theguardian.com
1 day agoCanvas hack: is it ever a good idea to pay a ransom, and what happens to the data?
Instructure reached an agreement with ransomware attackers after student data theft, login page defacement, and assignment delays, with experts suspecting ransom payment.
Information security
fromtheregister
1 day agoEurope built sovereign clouds to escape US control. Then forgot about the processors
European sovereign cloud programs reduce legal exposure, but underlying Intel/AMD management engines operate below host control and can persist outside security visibility.
Information security
fromThe Hacker News
2 days agoWhat 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface
Legitimate administrative tools are widely abused in high-severity incidents, so reducing attack surface by removing risky capabilities is faster than relying on detection alone.
Information security
fromThe Hacker News
3 days agoCISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits
CVE-2026-20182 in Cisco Catalyst SD-WAN Controller enables unauthenticated remote authentication bypass and administrative access, added to CISA KEV with FCEB remediation by May 17, 2026.
Information security
fromtheregister
3 days agoNobody believes the 'criminals and scumbags' who hacked Canvas really deleted stolen student data
Instructure claims stolen data was destroyed and no customers will be extorted, but ransomware researchers doubt deletion and warn further threats are likely.
Information security
fromSecuritymagazine
3 days agoDid Iran Hack Tank Readers at US Gas Stations? Security Leaders Discuss
Iranian actors are suspected of hacking gas station tank gauge systems, altering displayed readings without changing fuel levels, prompting calls to strengthen critical infrastructure security.
Information security
fromtheregister
2 days agoExploited Exchange Server flaw turns OWA inboxes into script launchpads
CVE-2026-42897 in on-prem Exchange OWA can enable arbitrary JavaScript execution via crafted emails, with emergency mitigation potentially breaking inline images and calendar printing.
fromnews.bitcoin.com
3 days agoRipple's Schwartz Warns XRP Users to Stay Safe From Giveaway Scams
SCAM ALERT: There has been a huge escalation lately in airdrop and giveaway scams targetting XRPL users lately. Any such posts you see are likely scams. Ripple-linked fraud warnings in recent months have also covered phishing operations targeting XRP holders through fake verification requests and malicious wallet prompts. Some schemes encouraged users to connect wallets or submit sensitive recovery information through unofficial channels masquerading as trusted XRP resources.
Information security
#cyberattack
Information security
fromComputerWeekly.com
2 days agoJaguar Land Rover profit slumps after cyber attack | Computer Weekly
A 2025 cyber attack caused major revenue and profit declines for Jaguar Land Rover despite production recovery, leading to large systemic economic costs and ongoing FY27 growth focus.
Information security
fromTechCrunch
3 days agoA spyware investigator exposed Russian government hackers trying to hijack Signal accounts | TechCrunch
Hackers impersonated Signal, warned of fake security threats, and used verification-code prompts to trick users into granting account access via attacker-controlled devices.
#ai-cybersecurity
Information security
fromSocial Media Explorer
4 days agoAI Model "Claude Mythos" Raises New Questions About Cybersecurity and Machine Intelligence - Social Media Explorer
AI systems are rapidly advancing in cybersecurity tasks, creating dual-use risks by improving vulnerability discovery while potentially lowering barriers to cyberattacks.
Information security
fromNextgov.com
3 days agoHouse Homeland panel gets briefing on Anthropic's Mythos
A congressional briefing demonstrated Anthropic’s Mythos AI hacking capabilities and emphasized urgent, responsible deployment of advanced U.S. models to patch vulnerabilities before adversaries exploit them.
Information security
fromThe Hacker News
3 days agoCisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access
Cisco released updates for CVE-2026-20182, a maximum-severity authentication bypass in Catalyst SD-WAN Controller that enables unauthenticated remote admin access and NETCONF configuration changes.
Information security
fromThe Hacker News
3 days agoThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories
Compromised sites and fake helpdesks enable modular persistence, encrypted proxy access, credential theft, privilege escalation, lateral movement, and data exfiltration.
Information security
fromSecuritymagazine
4 days agoThe Bench You'll Need in Three Years Depends on Decisions You Make Now
AI-native security tools automate entry-level tasks, shrinking the entry talent pipeline and creating a widening skills mismatch that will reduce hiring, provider quality, and bench strength.
fromSecurityWeek
3 days agoF5 Patches Over 50 Vulnerabilities
The most severe of the resolved issues is CVE-2026-42945 (CVSS v4.0 score of 9.2), a denial-of-service (DoS) condition in NGINX's ngx_http_rewrite_module module. The bug allows an unauthenticated attacker to send crafted HTTP requests that, combined with certain conditions beyond the attacker's control, could trigger a heap buffer overflow and a restart. If Address Space Layout Randomization (ASLR) is disabled, the flaw can be exploited for code execution.
Information security
fromArs Technica
3 days agoZero-day exploit completely defeats default Windows 11 BitLocker protections
A zero-day exploit circulating online allows people with physical access to a Windows 11 system to bypass default BitLocker protections and gain complete access to an encrypted drive within seconds. The exploit, named YellowKey, was published earlier this week by a researcher who goes by the alias Nightmare-Eclipse. It reliably bypasses default Windows 11 deployments of BitLocker, the full-volume encryption protection Microsoft provides to make disk contents off-limits to anyone without the decryption key, which is stored in a secured piece of hardware known as a trusted platform module (TPM).
Information security
Information security
fromThe Hacker News
3 days agoGhostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike
Ghostwriter/FrostyNeighbor conducts persistent, adaptive cyber operations against Eastern European government targets using evolving malware, phishing, and credential abuse.
#cybersecurity
Information security
fromSecuritymagazine
5 days agoCybersecurity Is No Longer a Gatekeeper, But the Engine of Delivery Across Digital Economy
Cybersecurity is a top fast-growing skill and must be integrated into product delivery, since both protection gaps and misconfigured controls can cause outages, breaches, and lost trust.
Information security
fromtheregister
4 days agoWelcome to the vulnpocalypse, as vendors use AI to find bugs and patches multiply like rabbits
AI-based code scanning is rapidly increasing vulnerability discovery, driving more patches and greater administrative workload while raising risks if patches break systems.
Information security
fromLondon Business News | Londonlovesbusiness.com
4 days agoHow we can combat the critical national infrastructure threat from the Iran war - London Business News | Londonlovesbusiness.com
UK critical infrastructure faces elevated, evolving cyber risk from Iran-related conflict, especially via indirect attacks through regional supply chains and overseas assets.
[ Load more ]