Cybersecurity news from across the internet
Cybersecurity news from across the internet
Researchers at ReliaQuest have observed a surge in voice phishing (vishing) and Microsoft Teams phishing over the past several months, particularly from extortion groups like ShinyHunters.
When LLM Gateways Go Wrong: Findings from LiteLLM
ZDI-26-755: (0Day) Genesis World glTF Server-Side Request Forgery Vulnerability
ZDI-26-754: (0Day) Genesis World URDF Directory Traversal Information Disclosure Vulnerability
ZDI-26-753: (0Day) Genesis World MJCF Directory Traversal Information Disclosure Vulnerability
October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)
VU#456950: Komodo Periphery Agent Contains an OS Command Injection Vulnerability
VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration
VU#573195: Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint Inconsistency in RFC 5280 Implementation
Extortion Groups are Impersonating Help Desks to Gain Initial Access
North Korean IT Workers Expanding Use of Facilitators, Broadening Recruitment
Report: Ransomware Attacks Involving Data Theft Are Surging
Grindr users’ sensitive data shared through ad auctions without valid consent
