Pools CERT: Aanval op energiecentrale via private APN en standaard wachtwoord
Begin dit jaar meldde het Poolse Computer Emergency Response Team (CERT) dat een paar weken eerder verschillende onderdelen van ...
Read at the source
Security News
Live news from trusted publications, matched against DayBreach CVE data.
All sourcesArs Technica · 67BleepingComputer · 176CERT Polska · 78Cisco Talos · 47CrowdStrike · 33Dark Reading · 73DataBreaches.net · 35Krebs on Security · 13Microsoft Security Blog · 38Proofpoint · 37Rapid7 · 68SANS Internet Storm Center · 56Security.NL · 315SecurityWeek · 75SentinelOne · 33The Cyber Express · 70TheCyberThrone · 58The Hacker News · 301The Record · 47Unit 42 · 46
New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA
Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on. Passkeys are designed to replace reusable passwords and resist phishing. The attacks instead reused signed authentication material that Windows had exposed, abused a cloud-synced passkey system from malware already on the victim's machine, and used a
Read at the source
LexisNexis shuts down services after suspicious activity on servers
LexisNexis took its Diligence, Metabase API, and Newsdesk services offline as part of its response to unusual activity on servers hosted and managed by an unnamed third-party vendor. [...]
Read at the source
Podatność w oprogramowaniu entr
W oprogramowaniu eradman entr wykryto podatność typu Heap-based buffer overflow (CVE-2026-18370).
Read at the source
Valve notifies Steam hardware customers of a data breach
Video game publisher and digital distribution giant Valve is notifying Steam hardware customers in Europe that hackers stole their data after hacking its shipping partner, CEVA Logistics. [...]
Read at the source
TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore
The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers once again in attacks targeting Russian companies spanning instrumentation, electronics, transport, energy, IT, and software development sectors. Russian cybersecurity vendor Kaspersky said it detected the attacks in July 2026. The activity involves exploiting a vulnerability chain
Read at the source
Podatności w oprogramowaniu GNU cpio
W oprogramowaniu GNU cpio wykryto 3 podatności różnego typu (od CVE-2026-66484 do CVE-2026-66486)
Read at the source
Fortinet waarschuwt voor backdoor in vpn-software QuickFox
Netwerkbeveiliger Fortinet waarschuwt voor de aanwezigheid van een backdoor in vpn-software QuickFox. De malafide code zou ...
Read at the source
Podatności w oprogramowaniu GNU Emacs
W oprogramowaniu GNU Emacs wykryto 4 podatności różnego typu (od CVE-2026-71391 do CVE-2026-71394)
Read at the source
Bestellingen bij Bijenkorf als gevolg van hack wekenlang vertraagd
Klanten van de Bijenkorf die online iets bij de winkel bestellen moeten weken lang wachten voordat ze het product geleverd ...
Read at the source
1041-1050 / 1528 news items shown