Security News

Live news from trusted publications, matched against DayBreach CVE data.

DataBreaches.net7 days ago

UK: Commercial market research and data-gathering firm in the medical space leaked health data

UpGuard provides another entry for our “No need to hack when it’s leaking” files. This time, it’s Liberating Research. On August 31, Greg Pollock from UpGuard contacted DataBreaches.net to report a data leak they discovered containing sensitive medical information on almost 100,000 people. By agreement, we both delayed publication to give the responsible firm time... Source

Related Companies
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
DataBreaches.net7 days ago

ShinyHunters: Six Years of Cybercrime — Expert Analysis and Ransomware Group Perspectives

Back in the day, when my co-author and I would conduct training workshops on neurobehavioral disorders in children and teens, we would always introduce our presentation with an overhead that said, “Two Professionals. Three Opinions.” That remains true for so many controversial or contentious topics. This week, Marco A. De Felice of SuspectFile tackled questions... Source

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News7 days ago

[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls

The dangerous part of a stolen identity isn't always the initial login. It's what an attacker can do with that access next. With AI accelerating reconnaissance, exploitation of vulnerabilities, and privilege escalation, attackers can move through systems faster than security teams can investigate. A compromised account that looks legitimate at first could become the starting point for a much

Related Companies
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
Rapid77 days ago

CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab

OverviewOn October 12, 2026, GitLab published a critical patch release for CVE-2026-97229, an integer overflow or wraparound (CWE-190) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability a CVSSv3.1 score of 10.0. Under certain conditions, a remote attacker can execute arbitrary code on an affected GitLab server through a specially crafted regular expression stored in a malicious CI/CD configuration. While the vendor supplied CVSS score indicates that exploitation is fully unauthenticated, in reproducing

Related Companies
İlgili CVE'ler
Read at the source

431-440 / 1668 news items shown