Security News
Live news from trusted publications, matched against DayBreach CVE data.

Podatność w oprogramowaniu Apereo CAS Client
W oprogramowaniu Apereo CAS Client wykryto podatność polegającą na nieprawidłowej walidacji certyfikatu (CVE-2026-15243).
Read at the source
Podatności w oprogramowaniu GNU coreutils
W oprogramowaniu GNU coreutils wykryto 2 podatności różnego typu (CVE-2026-56391 i CVE-2026-56392)
Read at the source
Don’t swing at everything
Thorsten explores Q2 2026 stats, the artificial buffer zone of 2026, and why smart, prioritized patching is more critical than ever.
Read at the source
Email threat landscape: Q2 2026 trends and insights
In the second quarter of 2026, the continuing effects of Microsoft’s disruption of the Tycoon2FA phishing platform contributed to sustained declines in several major phishing techniques, while threat actors expanded into Teams-based social engineering and employed increasingly automated and multi-stage attack chains. The post Email threat landscape: Q2 2026 trends and insights appeared first on Microsoft Security Blog.

Russian Global Webmail Espionage
Unit 42 details a Russian cyberespionage campaign targeting Zimbra webmail servers using JavaScript injection to steal credentials. The post Russian Global Webmail Espionage appeared first on Unit 42.


What Happened Between OpenAI and Hugging Face?
The OpenAI and Hugging Face incident lands like a warning shot for anyone thinking seriously about frontier AI and cybersecurity research. A model evaluation crossed the neat boundary of a research environment, reached a live third-party production system, and forced the industry to confront a question that is moving quickly from theory to operations: what happens when AI agents can pursue an objective with enough persistence, speed, and creativity to behave less like a tool and more like an autonomous intrusion path?According to OpenAI’s disclosure, the incident began during an internal evalu
1531-1540 / 1627 news items shown