Ivanti warns of Connect Secure zero-day exploited in attacks
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway. [...]
Read at the source
Security News
Live news from trusted publications, matched against DayBreach CVE data.
All sourcesArs Technica · 60BleepingComputer · 134CERT Polska · 74Cisco Talos · 45CrowdStrike · 32Dark Reading · 49DataBreaches.net · 19Krebs on Security · 12Microsoft Security Blog · 36Proofpoint · 31Rapid7 · 61SANS Internet Storm Center · 49Security.NL · 266SecurityWeek · 39SentinelOne · 30The Cyber Express · 60TheCyberThrone · 45The Hacker News · 253The Record · 22Unit 42 · 42
Docker Hub flaw let attackers impersonate users, tamper with images
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]
Read at the source
North Korean hackers target Ukrainian experts for possible intelligence on Russia's war
North Korean hackers have been targeting Ukrainian experts in diplomacy, security and international policy amid Pyongyang’s growing military cooperation with Russia.
Read at the source
Ivanti waarschuwt voor misbruik van lek in Connect Secure vpn-servers
Ivanti waarschuwt klanten voor actief misbruik van een kwetsbaarheid in Ivanti Connect Secure vpn-servers. Via het ...
Read at the sourceEuropese privacytoezichthouders: camerabril moet filmen duidelijk aangeven
Camerabrillen moeten duidelijk aan omstanders laten weten dat er wordt gefilmd, zo stellen de Europese privacytoezichthouders ...
Read at the source
The MFA Gaps Attackers are Still Exploiting
Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems that still rely on passwords alone. Specops explains why protecting cloud applications isn't enough and how organizations can close these authentication gaps. [...]
Read at the source
'Toename van fysieke overvallen op cryptobezitters als gevolg van datalekken'
Er is een toename van fysieke overvallen op cryptobezitters als gevolg van datalekken, zo stelt cybersecuritybedrijf Hudson ...
Read at the source
SAP warns of maximum severity OAuth2 SSRF security flaw
SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. [...]
Read at the source
Russian internet provider SkyNet reports outages after cyberattack claimed by Ukrainian hackers
One of St. Petersburg's major internet providers said its network had been under a distributed denial-of-service (DDoS) attack since October 6, affecting services including online gaming, voice calls and video conferencing.
Read at the source
41-50 / 1286 news items shown