Security News

Live news from trusted publications, matched against DayBreach CVE data.

All sourcesArs Technica · 66BleepingComputer · 174CERT Polska · 78Cisco Talos · 47CrowdStrike · 33Dark Reading · 72DataBreaches.net · 35Krebs on Security · 13Microsoft Security Blog · 38Proofpoint · 37Rapid7 · 68SANS Internet Storm Center · 55Security.NL · 315SecurityWeek · 75SentinelOne · 33The Cyber Express · 70TheCyberThrone · 57The Hacker News · 301The Record · 47Unit 42 · 46
The Hacker News14 d ago

Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies

The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessful efforts to compromise Etherpad, a public note-taking tool, and edit Wikipedia pages. "The unauthorized bot activities included edits to our wikis, some unsuccessful attempts to exploit a public note-taking tool we host, and heavy traffic,

Related Companies
E
ether logo
ether
O
OpenAI logo
OpenAI
W
wikimedia logo
wikimedia
V
vmware logo
vmware
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News14 d ago

Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers

In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol delivered. Thousands of developers built servers, and enterprises plugged them into agent workflows. The ecosystem around it fell short. Earlier this year, our team at OX Security, traced critical vulnerabilities in Anthropic's MCP

Related Companies
R
rubygems logo
rubygems
0
03-lovepreetSingh logo
03-lovepreetSingh
P
pypi logo
pypi
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News14 d ago

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, means researchers can no longer submit security flaws in the code of projects such as Go, Angular, and Protocol Buffers there for a reward. Reports about supply chain compromises are still accepted, and reports filed before October 1 are

Related Companies
G
google logo
google
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News14 d ago

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each product's web application root directory. The attacker must already know a file's exact name and path and cannot list what the directory holds. Atlassian disclosed the flaw, CVE-2026-21589, on October 5, rated it 9.3 out of 10, and

Related Companies
A
Atlassian logo
Atlassian
K
Known logo
Known
H
HumHub logo
HumHub
İlgili CVE'ler
CVE-2021-26086
Read at the source
The Hacker News14 d ago

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees. That's according to a report from Reuters, citing two sources familiar with the matter. "To date, our review has determined that the incident occurred as the result of a security failure ​

Related Companies
OC
Oracle Corporation logo
Oracle Corporation
O
oracle logo
oracle
G
gnu logo
gnu
İlgili CVE'ler
CVE-2026-35273
Read at the source
The Hacker News14 d ago

Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account

Unauthorized parties have gained access to the names, addresses, and personal identification numbers of about 8.8 million people, living and dead, in Denmark's national population register, the country's digitalization ministry said on October 5. They used a private Danish company's lawful right to look up records in the Central Person Register (CPR). The ministry has told people never to

Related Companies
S
samsung logo
samsung
M
microsoft logo
microsoft
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News1 mo ago

How to Secure Enterprise AI: From Adoption to Incident Readiness

The debate about whether AI delivers business value is over. The challenge now is implementing it at scale and securely across every function while meeting board-level pressure to move fast. Organizations must focus on adopting AI at business speed without losing control of cyber risk. Download the full eBook here. The Business Reality In Sygnia’s 2026 CISO Survey Report, which

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News1 mo ago

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN appliances that have been exploited in zero-day attacks. The vulnerabilities, discovered internally by SonicWall's William Perry and Adam Babis, are listed below - CVE-2026-83548 (CVSS score: 10.0) - A pre-authentication SSRF vulnerability in the Appliance

Related Companies
S
sonicwall logo
sonicwall
S
sma logo
sma
A
apostrophecms logo
apostrophecms
İlgili CVE'ler
CVE-2026-83548 CVE-2026-83549 CVE-2026-15409 CVE-2026-15410
Read at the source
The Hacker News1 mo ago

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospatial metadata catalog, which sits behind many government and agency geoportals. The project shipped fixes in versions 4.4.12 and 4.2.17 on July 8, 2026, and published the vulnerability details on August 31. GeoNetwork originated at the United Nations Food and

Related Companies
O
osgeo logo
osgeo
G
geoserver logo
geoserver
G
geonetwork logo
geonetwork
İlgili CVE'ler
CVE-2024-36401 CVE-2025-58360
Read at the source
The Hacker News1 mo ago

Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands

The U.S. Department of Justice (DoJ) has charged a Russian national, extradited from Cyprus on August 28, with using roughly 255 fake accounts on a freelance platform to send malware-laced Excel attachments to about 80,000 of its users in 2016 and 2017. Searzhudin Tamirlanovich Aktulaev, 40, was arrested in Cyprus in May 2025, the U.S. Attorney's Office for the Northern District of California

Related Companies
M
microsoft logo
microsoft
A
adobe logo
adobe
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

121-130 / 301 news items shown

Security News · DayBreach