Security News

Live news from trusted publications, matched against DayBreach CVE data.

All sourcesArs Technica · 64BleepingComputer · 164CERT Polska · 78Cisco Talos · 46CrowdStrike · 32Dark Reading · 69DataBreaches.net · 29Krebs on Security · 13Microsoft Security Blog · 38Proofpoint · 37Rapid7 · 68SANS Internet Storm Center · 55Security.NL · 300SecurityWeek · 66SentinelOne · 33The Cyber Express · 70TheCyberThrone · 55The Hacker News · 287The Record · 39Unit 42 · 46
The Hacker News9 d ago

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

Anthropic on Friday said it's cutting off live internet access for all its internal evaluations until further notice following the discovery of new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior and targeted real websites. The AI company said it identified four broad categories of unintended model actions during evaluations and internal use of Claude

Related Companies
M
microsoft logo
microsoft
A
asseco logo
asseco
A
anthropic logo
anthropic
S
samsung logo
samsung
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News10 d ago

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. "Using the account of Takashi Kitao, author of the 18,400-star game engine pyxel, the attacker pushed a malicious workflow to 27 repositories starting at 13:20 UTC," StepSecurity

Related Companies
G
github logo
github
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News10 d ago

FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack

The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X. ShinyHunters is the extortion group that said in September it had breached the FBI's jobs portal and stolen sensitive data on almost all FBI agents and job applicants. The FBI has not named the suspect, and no charges have been made public. The

Related Companies
O
oracle logo
oracle
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News10 d ago

TP-Link Sued by Four More U.S. States Over Router Security and China Ties

Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with Texas filing a suit in February. Florida, Iowa, Montana and Nebraska allege the California company misled buyers about how secure its routers are and how separate it is from China. TP-Link denies the claims and says it will fight them in court. TP-Link Systems is based in

Related Companies
T
tp-link logo
tp-link
TS
TP-Link Systems Inc. logo
TP-Link Systems Inc.
CN
Citrix NetScaler logo
Citrix NetScaler
C
citrix logo
citrix
A
asus logo
asus
G
gentoo logo
gentoo
S
Soft-Machine-io logo
Soft-Machine-io
A
angular logo
angular
İlgili CVE'ler
CVE-2023-50224 CVE-2025-30237 CVE-2025-30238 CVE-2025-30239 CVE-2025-30240 CVE-2025-30241 CVE-2026-88772
Read at the source
The Hacker News10 d ago

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives attackers root access before anyone approves the connection. AnyDesk patched the flaw in version 8.0.3 in June, but its changelog described the fix only as "fixed a bug that could lead to a crash," with no CVE assigned and no security

Related Companies
A
anydesk logo
anydesk
CN
Citrix NetScaler logo
Citrix NetScaler
C
citrix logo
citrix
M
microsoft logo
microsoft
W
windriver logo
windriver
L
linux logo
linux
TL
The Linux Kernel Organization logo
The Linux Kernel Organization
T
tinacms logo
tinacms
İlgili CVE'ler
CVE-2025-27918 CVE-2026-88772
Read at the source
The Hacker News10 d ago

Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects

Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). "It's an opt-in service informed by our experience using Claude to find vulnerabilities during Project Glasswing," Anthropic said. "Projects that join will receive thorough, periodic security scans by our strongest models at no cost."

Related Companies
S
StableBit logo
StableBit
A
anthropic logo
anthropic
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News10 d ago

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below - CVE-2026-105133 (CVSS v4 score: 5.5) - An improper authentication vulnerability in the checkSysPwd() function in the "com/ahsay/obs/api/ApiStructsAction.java"

Related Companies
A
Ahsay logo
Ahsay
CN
Citrix NetScaler logo
Citrix NetScaler
C
citrix logo
citrix
M
Microsoft logo
Microsoft
İlgili CVE'ler
CVE-2026-105133 CVE-2026-105134 CVE-2026-88772
Read at the source
The Hacker News10 d ago

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed below - CVE-2015-3306 (CVSS score: 10.0) - An improper access control vulnerability in ProFTPD that could allow

Related Companies
N
n/a logo
n/a
F
fedoraproject logo
fedoraproject
D
debian logo
debian
O
opensuse logo
opensuse
S
suse logo
suse
P
proftpd logo
proftpd
CN
Citrix NetScaler logo
Citrix NetScaler
C
citrix logo
citrix
İlgili CVE'ler
CVE-2015-3306 CVE-2026-88772 CVE-2023-22894 CVE-2021-22205 CVE-2021-3199 CVE-2019-11510 CVE-2016-3081 CVE-2015-5477 CVE-2014-6278
Read at the source
The Hacker News10 d ago

The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition

As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The "Horizons of Identity Security" report from SailPoint highlights a critical “velocity paradox,” in which organizations invest in AI-speed business operations while continuing to rely on human-speed security controls, creating a

Related Companies
G
gentoo logo
gentoo
S
Soft-Machine-io logo
Soft-Machine-io
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News10 d ago

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then take that address over. Searchlight Cyber, which disclosed the flaw on October 8, says an attacker who recovers the key can redirect the site's visitors to a copy of the site they control.

Related Companies
T
torprject logo
torprject
T
torproject logo
torproject
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

51-60 / 268 news items shown