Russian Influence Operation Widely Targets Latin America
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.
Read at the source
Security News
Live news from trusted publications, matched against DayBreach CVE data.
All sourcesArs Technica · 63BleepingComputer · 154CERT Polska · 78Cisco Talos · 46CrowdStrike · 32Dark Reading · 64DataBreaches.net · 29Krebs on Security · 12Microsoft Security Blog · 37Proofpoint · 37Rapid7 · 64SANS Internet Storm Center · 54Security.NL · 291SecurityWeek · 57SentinelOne · 32The Cyber Express · 67TheCyberThrone · 54The Hacker News · 279The Record · 33Unit 42 · 45
From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)
An enterprise mail server authenticates users, stores private communications, delivers recovery links, runs calendars, and sends mail that employees and other systems trust. Compromising it can therefore expose both email and the identities and workflows built around it.During a broader assessment of Zimbra Collaboration Suite (ZCS), Rapid7 reported more than 80 vulnerabilities spanning authentication, mailbox authorization, calendar processing, web clients, document services, and the host operating system. The affected components are being fixed on different schedules, so we are publishing th
Read at the source
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st. [...]
Read at the source
Anthropic warns small AI models could self-replicate through IoT devices
"Small weight-based replicators" could usher in a new generation of computer worms.
Read at the source
Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce
OverviewWhile performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered CVE-2026-108065, an SQL Injection vulnerability (CWE-89) in Channel Software WebAlliance eCommerce.The exploit allows a malicious actor to read sensitive data from the database, or, if the database user has high privileges, run system commands on the database server. The vulnerability, scored as CVSSv3.1 9.8 (Critical).Product DescriptionWebAlliance eCommerce by Channel Software is an all-in-one B2B e-commerce, digital catalog, and customer portal platform purpose-built for whol
Read at the source
Kabinet wijst bezwaar DigiD-beheerder Solvinity af: 'Overnameverbod noodzakelijk'
Het kabinet blijft erbij dat een Amerikaanse overname van DigiD-beheerder Solvinity tot een 'bedreiging van het publiek belang' ...
Read at the source
CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
The sixth exploited Ivanti bug this year drew attention from the feds and researchers, while a severe Microsoft vulnerability was one of more than 1,400 listed for Patch Tuesday.
Read at the source
Congressional probe faults Match Group for failing to rein in dating app scams
The Joint Economic Committee on Tuesday released the results of a year-long investigation into Tinder, Hinge, Match, Plenty of Fish and several other dating sites owned by Match Group.
Read at the source
CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the latest version following the disclosure of an actively exploited vulnerability. The security flaw, tracked as CVE-2026-104935 (CVSS score: 8.6), is a case of authentication bypass impacting ICS
Read at the source
CCB: 'Hang koelsystemen niet direct aan internet en installeer updates'
De Belgische en de Duitse overheid roepen supermarkten en andere bedrijven op om koelinstallaties niet direct aan het internet ...
Read at the source
171-180 / 1504 news items shown