Security News

Live news from trusted publications, matched against DayBreach CVE data.

All sourcesArs Technica · 63BleepingComputer · 155CERT Polska · 78Cisco Talos · 46CrowdStrike · 32Dark Reading · 64DataBreaches.net · 29Krebs on Security · 12Microsoft Security Blog · 37Proofpoint · 37Rapid7 · 64SANS Internet Storm Center · 54Security.NL · 298SecurityWeek · 61SentinelOne · 32The Cyber Express · 70TheCyberThrone · 54The Hacker News · 282The Record · 34Unit 42 · 45
Rapid72 mo ago

Metasploit Framework 6.5 Released

Today we’re proud to announce that Metasploit Framework version 6.5 has been released. Over the past two years, with the help of countless contributors, we’ve added 422 new modules along with a whole slew of new features.Malleable C2 Profiles for HTTPOne of the latest and most requested features is support for Malleable C2 profiles across all current Meterpreter payloads. This feature enables users to load a standard profile into Meterpreter and change the shape of its HTTP(S) traffic. All Meterpreters, including Windows, Java, Python, PHP and Linux, have been updated with this functionality.

Related Companies
F
freepbx logo
freepbx
C
cleverbrush logo
cleverbrush
V
vaadin logo
vaadin
A
Android logo
Android
L
Laravel logo
Laravel
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
Rapid72 mo ago

Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)

OverviewOn July 29, 2026, Broadcom published security advisory VMSA-2026-0006 addressing multiple vulnerabilities in several VMWare products. Included in the advisory are two critical remotely exploitable vulnerabilities affecting VMware vCenter Server: CVE-2026-59309 and CVE-2026-59310. Both vulnerabilities carry CVSSv3.1 base scores of 9.8 and can be exploited by unauthenticated attackers with network access to a vulnerable vCenter Server.CVECVSSv3.1Description SummaryCVE-2026-593099.8 (Critical)An authentication bypass vulnerability in the VMware Directory Service of vCenter that could allo

Related Companies
V
vmware logo
vmware
B
broadcom logo
broadcom
C
cakephp logo
cakephp
İlgili CVE'ler
CVE-2026-59309 CVE-2026-59310
Read at the source
Rapid72 mo ago

CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity

OverviewOn July 27, 2026, JetBrains published a security advisory for CVE-2026-63077, a critical unauthenticated vulnerability affecting all versions of TeamCity On-Premises. The issue is classified as deserialization of untrusted data and has a CVSS score of 9.8. An unauthenticated remote attacker with HTTP(S) access to a TeamCity server can exploit the agent polling protocol to bypass authentication checks and execute arbitrary operating system commands with the privileges of the TeamCity server process.In the blog post that JetBrains shared in tandem with CVE publication, they stated that a

Related Companies
J
jetbrains logo
jetbrains
İlgili CVE'ler
CVE-2026-63077
Read at the source
Rapid72 mo ago

How AI is Rewriting the Zero-Day Playbook for Preemptive Security

The scenario is all too familiar for any cybersecurity professional: It’s late in the day, and a critical zero-day vulnerability is disclosed. When this happens, CISOs from every industry immediately turn to their Security Operations Centers (SOC) with the single most important, and often most difficult, question: "Are we exposed?”Answering questions like these when zero-days drop tends to trigger a frantic, high-stress fire drill. Analysts scramble to cross-reference outdated Configuration Management Databases (CMDBs), query disparate endpoint detection tools, and ping IT administrators. The

Related Companies
G
gentoo logo
gentoo
S
Soft-Machine-io logo
Soft-Machine-io
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
Rapid72 mo ago

Rapid7 Analysis: Check Point SmartConsole Authentication Bypass (CVE-2026-16232)

OverviewOn July 22, 2026, Check Point published a security advisory for CVE-2026-16232, an authentication bypass in the SmartConsole login process affecting Security Management Server and Multi-Domain Security Management Server (MDS). By leveraging CVE-2026-16232, an unauthenticated attacker can obtain an application login token, use this token to log in through SmartConsole with full administrator privileges, and modify the security policy or security configuration. Exploitation requires network access to the Management Server and for a Trusted Clients configuration that does not restrict GUI

Related Companies
C
checkpoint logo
checkpoint
C
cakephp logo
cakephp
R
rapid7 logo
rapid7
İlgili CVE'ler
CVE-2026-16232
Read at the source
Rapid72 mo ago

The Next Evolution of MDR: Preemptive Defense and Agentic Investigation

For years, security operations followed a familiar sequence: detect suspicious activity, investigate what happened, and respond before it caused significant harm. That model developed in a threat landscape where defenders had considerably more time to establish the facts and decide what to do next. In 2019, the average data breach took 206 days to identify and another 73 days to contain, creating a total breach lifecycle of 279 days.As the time between initial access and attacker movement continues to contract, security teams are being asked to operate within a much narrower window. AI is acce

Related Companies
SE
ST Engineering iDirect logo
ST Engineering iDirect
V
vercel logo
vercel
P
payloadcms logo
payloadcms
N
npm logo
npm
A
alibaba-fusion logo
alibaba-fusion
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
Rapid72 mo ago

Rapid7 Cyber GRC is now available: Turn security action into compliance proof

Compliance has become one of the biggest operational drains on modern security teams. CISOs are being asked to manage a growing sprawl of frameworks, prove control effectiveness more often, respond to more customer assurance requests, track risk across a growing web of third parties, and give executives and the board a clearer answer on whether cyber risk is actually going down.Most of that pressure does not come from the frameworks themselves. It comes from the way compliance is still handled in many organizations, with security work happening in one set of tools and governance, risk, and com

Related Companies
G
gentoo logo
gentoo
S
Soft-Machine-io logo
Soft-Machine-io
R
rapid7 logo
rapid7
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
Rapid72 mo ago

Rapid7 and Exclusive Networks expand partnership to modernize security operations and accelerate customer success

Claudia Zoon is Senior Manager, Channel Sales at Rapid7.Across Belgium, the Netherlands, and Luxembourg, organizations are accelerating digital transformation through AI, cloud adoption, and increasingly connected business operations. These investments are creating new opportunities for innovation, but also reshaping the cybersecurity landscape.In this dynamic environment, Rapid7 is excited to announce an expanded strategic distribution partnership with Exclusive Networks across the Benelux region. Why now? Because as organizations grow, so too do the expectations of security teams. As attack

Related Companies
H
huggingface logo
huggingface
G
gentoo logo
gentoo
T
themegrill logo
themegrill
S
Soft-Machine-io logo
Soft-Machine-io
P
pypi logo
pypi
EN
Exclusive Networks logo
Exclusive Networks
R
rapid7 logo
rapid7
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
Rapid72 mo ago

What Happened Between OpenAI and Hugging Face?

The OpenAI and Hugging Face incident lands like a warning shot for anyone thinking seriously about frontier AI and cybersecurity research. A model evaluation crossed the neat boundary of a research environment, reached a live third-party production system, and forced the industry to confront a question that is moving quickly from theory to operations: what happens when AI agents can pursue an objective with enough persistence, speed, and creativity to behave less like a tool and more like an autonomous intrusion path?According to OpenAI’s disclosure, the incident began during an internal evalu

Related Companies
HF
Hugging Face logo
Hugging Face
O
OpenAI logo
OpenAI
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
Rapid72 mo ago

CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild

OverviewOn July 22, 2026, Check Point published a security advisory for multiple vulnerabilities affecting Security Management, Multi-Domain Management, and firewall products. The most urgent of these is CVE-2026-16232, an authentication bypass in the SmartConsole login process classified as improper authentication (CWE-287). CVE-2026-16232 has been assigned a critical CVSS score of 9.1. The vulnerability allows an unauthenticated remote attacker to obtain an application login token and authenticate to the management server with full administrative privileges, enabling modification of security

Related Companies
C
checkpoint logo
checkpoint
C
cakephp logo
cakephp
İlgili CVE'ler
CVE-2026-16232 CVE-2026-50751 CVE-2026-62144 CVE-2026-62145 CVE-2024-24919
Read at the source

51-60 / 64 news items shown