Live news from trusted publications, matched against DayBreach CVE data.
cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPanel account and the server's administrative database identity. It shipped in a targeted security release that closes two other routes past account boundaries. The database bug is tracked as CVE-2026-58048 (CVSS 4.0 score: 9.4) and affects
Read at the source
The PNLD data breach has exposed contact information belonging to police officers, government partners, criminal justice professionals and customers after data from the Police National Legal Database (PNLD) was published on the dark web. The data breach at PNLD, identified on July 26, 2026, also affected some users of Ask the Police, raising concerns about targeted phishing attacks. PNLD Data Breach Exposes Police and Contact Details According to PNLD, the compromised data includes names, organizations and work email addresses of police officers, police staff, criminal justice professionals, g
The Liechtenstein cyberattack has prompted authorities to investigate a major security breach after copies of sensitive data linked to around 31,000 legal entities were unlawfully accessed from the country's Register of Beneficial Owners (VwbP). Following the cyberattack on Liechtenstein, officials temporarily suspended external access to the register while investigations continue. Although data was exfiltrated, the government said there is currently no evidence that records were altered or deleted. Cyberattack on Liechtenstein's VwbP Register According to the Liechtenstein government, the Vwb
Talos has collected prompt logs from threat actor endpoints running various applications, such as Claude Code, CodeX, Cursor, or Gemini. This blog is an analysis of the ways we've seen bad actors leveraging cloud-based AI.
Apple heeft in meerdere landen chatapp Telegram tijdelijk uit de App Store verwijderd. Volgens het techbedrijf werd via het ...
Microsoft heeft buiten de maandelijkse patchcyclus om een noodpatch uitgebracht voor een kwetsbaarheid in Excel. Via het ...
Read at the source
A new Russian loader-as-a-service (LaaS) codenamed DOUBLECUP has been using ClickFix lures as a way to stage malware-laced PNG images in victims' browser cache and ultimately deliver CountLoader and a previously undocumented remote access trojan called DeviceManager. "The first stage drops a steganographic PNG image into the browser's cache, retrieves its hidden content, and executes the second
De Autoriteit Persoonsgegevens (AP) moet pal achter de burger staan, zo stellen Amnesty International en Bits of Freedom (BoF). ...
Twee kwetsbaarheden in de SMA1000-gateway van netwerkbeveiliger SonicWall worden gebruikt om organisaties met ransomware te ...
Read at the sourceHet Tor Project zoekt mensen die anderen willen helpen bij het omzeilen van online censuur door een Android-app genaamd ...
1131-1140 / 1447 news items shown
