Security News

Live news from trusted publications, matched against DayBreach CVE data.

All sourcesArs Technica · 66BleepingComputer · 174CERT Polska · 78Cisco Talos · 47CrowdStrike · 33Dark Reading · 73DataBreaches.net · 35Krebs on Security · 13Microsoft Security Blog · 38Proofpoint · 37Rapid7 · 68SANS Internet Storm Center · 55Security.NL · 315SecurityWeek · 75SentinelOne · 33The Cyber Express · 70TheCyberThrone · 57The Hacker News · 301The Record · 47Unit 42 · 46
Rapid76 d ago

Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce

OverviewWhile performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered CVE-2026-108065, an SQL Injection vulnerability (CWE-89) in Channel Software WebAlliance eCommerce.The exploit allows a malicious actor to read sensitive data from the database, or, if the database user has high privileges, run system commands on the database server. The vulnerability, scored as CVSSv3.1 9.8 (Critical).Product DescriptionWebAlliance eCommerce by Channel Software is an all-in-one B2B e-commerce, digital catalog, and customer portal platform purpose-built for whol

Related Companies
CS
Channel Software logo
Channel Software
İlgili CVE'ler
CVE-2026-108065
Read at the source
The Hacker News6 d ago

CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the latest version following the disclosure of an actively exploited vulnerability. The security flaw, tracked as CVE-2026-104935 (CVSS score: 8.6), is a case of authentication bypass impacting ICS

Related Companies
I
ivanti logo
ivanti
O
openvpn logo
openvpn
C
CISA logo
CISA
T
tanium logo
tanium
A
adobe logo
adobe
İlgili CVE'ler
CVE-2026-104935
Read at the source
The Hacker News6 d ago

curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client's memory, and the researcher who reported it turned that into code execution on the uploading machine. The curl project fixed it on October 14 in curl 8.23.0. Taking over a client needs exact knowledge of its build and memory layout, and curl expects a real attack to end in a crash

Related Companies
C
curl logo
curl
T
trueconf logo
trueconf
I
ietf logo
ietf
DS
daniel stenberg logo
daniel stenberg
N
n/a logo
n/a
H
haxx logo
haxx
R
reactphp logo
reactphp
İlgili CVE'ler
CVE-2026-92392
Read at the source
DataBreaches.net6 d ago

Shipping firms and ports caught in mass cyber extortion claim

Bojan Lepic reports: A cyber extortion group has threatened to publish data it claims it stole from 38 shipping, port, and logistics companies unless they pay multimillion-dollar ransoms by October 19. Cybersecurity firm SOCRadar said the group, known as n0n, added the 38 organisations to its dark web leak site in a single batch on... Source

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News6 d ago

How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team

Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structured drill shows security teams exactly where verification breaks down, while nothing is at stake. The call comes in at 4:40 on a Friday. It's the CFO, or it sounds exactly like her, asking the controller to push a supplier payment out before the weekend because a deal closes

Related Companies
T
team logo
team
A
apache logo
apache
OR
Oleh RadiusTheme logo
Oleh RadiusTheme
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

321-330 / 1650 news items shown