Security News

Live news from trusted publications, matched against DayBreach CVE data.

All sourcesArs Technica · 65BleepingComputer · 171CERT Polska · 78Cisco Talos · 47CrowdStrike · 32Dark Reading · 71DataBreaches.net · 35Krebs on Security · 13Microsoft Security Blog · 38Proofpoint · 37Rapid7 · 68SANS Internet Storm Center · 55Security.NL · 315SecurityWeek · 75SentinelOne · 33The Cyber Express · 70TheCyberThrone · 57The Hacker News · 300The Record · 44Unit 42 · 46
Rapid76 d ago

From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)

An enterprise mail server authenticates users, stores private communications, delivers recovery links, runs calendars, and sends mail that employees and other systems trust. Compromising it can therefore expose both email and the identities and workflows built around it.During a broader assessment of Zimbra Collaboration Suite (ZCS), Rapid7 reported more than 80 vulnerabilities spanning authentication, mailbox authorization, calendar processing, web clients, document services, and the host operating system. The affected components are being fixed on different schedules, so we are publishing th

Related Companies
Z
Zimbra logo
Zimbra
S
synacor logo
synacor
S
samsung logo
samsung
V
Veeam logo
Veeam
M
microsoft logo
microsoft
İlgili CVE'ler
CVE-2026-73571 CVE-2026-10631 CVE-2026-50055 CVE-2026-50054 CVE-2026-93637 CVE-2026-93635
Read at the source
Rapid76 d ago

Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce

OverviewWhile performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered CVE-2026-108065, an SQL Injection vulnerability (CWE-89) in Channel Software WebAlliance eCommerce.The exploit allows a malicious actor to read sensitive data from the database, or, if the database user has high privileges, run system commands on the database server. The vulnerability, scored as CVSSv3.1 9.8 (Critical).Product DescriptionWebAlliance eCommerce by Channel Software is an all-in-one B2B e-commerce, digital catalog, and customer portal platform purpose-built for whol

Related Companies
CS
Channel Software logo
Channel Software
İlgili CVE'ler
CVE-2026-108065
Read at the source
The Hacker News6 d ago

CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the latest version following the disclosure of an actively exploited vulnerability. The security flaw, tracked as CVE-2026-104935 (CVSS score: 8.6), is a case of authentication bypass impacting ICS

Related Companies
I
ivanti logo
ivanti
A
adobe logo
adobe
O
openvpn logo
openvpn
C
CISA logo
CISA
T
tanium logo
tanium
İlgili CVE'ler
CVE-2026-104935
Read at the source
The Hacker News6 d ago

curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client's memory, and the researcher who reported it turned that into code execution on the uploading machine. The curl project fixed it on October 14 in curl 8.23.0. Taking over a client needs exact knowledge of its build and memory layout, and curl expects a real attack to end in a crash

Related Companies
C
curl logo
curl
R
reactphp logo
reactphp
T
trueconf logo
trueconf
I
ietf logo
ietf
DS
daniel stenberg logo
daniel stenberg
N
n/a logo
n/a
H
haxx logo
haxx
İlgili CVE'ler
CVE-2026-92392
Read at the source

271-280 / 1603 news items shown