Security News

Live news from trusted publications, matched against DayBreach CVE data.

All sourcesArs Technica · 68BleepingComputer · 190CERT Polska · 78Cisco Talos · 50CrowdStrike · 35Dark Reading · 82DataBreaches.net · 35Krebs on Security · 14Microsoft Security Blog · 39Proofpoint · 37Rapid7 · 70SANS Internet Storm Center · 58Security.NL · 342SecurityWeek · 96SentinelOne · 34The Cyber Express · 70TheCyberThrone · 62The Hacker News · 326The Record · 55Unit 42 · 48
SANS Internet Storm Center13 d ago

Reconstructing AI Agent Activity: Two New Scripts for Forensic Review, (Thu, Oct 8th)

We just did a major update to FOR577 and added a lot of new material on day 5 about investigating AI usage in incident response. In the new material we dicsuss 8&#;x26;#;xc2;&#;x26;#;xa0;of the most popular AI coding assistants and&#;x26;#;xc2;&#;x26;#;xa0;agents including Claude Code, Codex, Gemini CLI, Cursor, Copilot, Warp, Windsurf, and Qwen Code. I&#;x26;#;39;ve been using Claude Code and a little bit of Codex, but I also have recently been playing with OpenCode and am setting up Hermes. I decided to figure out where the chat history was in OpenCode and where any Herme

Related Companies
W
watchguard logo
watchguard
K
kerberos-io logo
kerberos-io
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News13 d ago

Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination Center (JPCERT/CC) said. The Tokyo-based center, which takes incident reports, based its October 8, 2026 alert on those reports and other information. The alert names no attacker and no affected organization. JPCERT/

Related Companies
CN
Citrix NetScaler logo
Citrix NetScaler
C
citrix logo
citrix
M
metabase logo
metabase
C
code16 logo
code16
S
sharp logo
sharp
F
freepbx logo
freepbx
L
lovell logo
lovell
İlgili CVE'ler
CVE-2026-88772 CVE-2026-72898
Read at the source
The Hacker News13 d ago

UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML

The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumented .NET infostealer and remote access trojan (RAT) codenamed ASHVEIN. According to TrendAI, the malware has been put to use in attacks targeting Ukrainian government personnel. The cybersecurity company is tracking the cluster under the name Earth Sirrush (previously SHADOW-EARTH-065). ASHVEIN,

Related Companies
@
@swc logo
@swc
T
tclahr logo
tclahr
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
TheCyberThrone13 d ago

CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000

A new critical vulnerability in SonicWall SMA1000 appliances deserves immediate attention from organizations using the platform as an internet-facing remote-access gateway. Tracked as CVE-2026-102255, the vulnerability is a pre-authentication Server-Side…

Related Companies
S
sonicwall logo
sonicwall
A
Atlassian logo
Atlassian
N
NetScaler logo
NetScaler
C
citrix logo
citrix
G
gotac logo
gotac
T
tinacms logo
tinacms
İlgili CVE'ler
CVE-2026-83548 CVE-2026-15409 CVE-2026-102255 CVE-2026-21589 CVE-2026-88779 CVE-2026-1022
Read at the source
The Hacker News14 d ago

ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence (AI) pen testing tool named ARTEX to carry out the attacks. The activity, per CrowdStrike Intelligence, was active from late September to early October 2026, and resulted in data exfiltration from various South Korea-based financial firms,

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
BleepingComputer14 d ago

OAuth grants pile up faster than you can review them. Here's how to keep up.

OAuth grants create data highways between SaaS apps, AI agents, and other tools. And, they are multiplying faster than any security team can review them. As the recent Klue breach showed, attackers are taking notice and exploiting forgotten OAuth grants to gain access to corporate data. This article covers why OAuth risks are so hard [...]

Related Companies
F
FriendsOfFlarum logo
FriendsOfFlarum
K
keephq logo
keephq
R
rubygems logo
rubygems
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

681-690 / 1733 news items shown