Apple Zero-Day Vulnerability Weaponized in Targeted Attacks
Attackers are exploiting CVE-2026-86950, an out-of-bounds write flaw, in an extremely sophisticated fashion, according to Apple.
Read at the sourceSecurity News
Live news from trusted publications, matched against DayBreach CVE data.
All sourcesArs Technica · 67BleepingComputer · 186CERT Polska · 78Cisco Talos · 50CrowdStrike · 35Dark Reading · 81DataBreaches.net · 35Krebs on Security · 14Microsoft Security Blog · 39Proofpoint · 37Rapid7 · 70SANS Internet Storm Center · 58Security.NL · 330SecurityWeek · 88SentinelOne · 34The Cyber Express · 70TheCyberThrone · 60The Hacker News · 317The Record · 52Unit 42 · 48
Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution
A patched Unsloth Studio vulnerability allows malicious AI models to execute arbitrary Python code during inspection, via the trust_remote_code setting.
Read at the source
Cloudflare Announces Public Certificate Authority for the Post-Quantum Web
Automated certificates for everyone, built for today, and hardened for the era of quantum computing.
Read at the source
Beyond source code: A path to the keys to the kingdom
Explore how Storm-3068 turned a compromised identity into broader cloud access and the steps organizations can take to defend their identities, pipelines, and cloud infrastructure. The post Beyond source code: A path to the keys to the kingdom appeared first on Microsoft Security Blog.
Read at the source
'NeedyMantis' Provides Long-Term Access to Compromised Networks
Microsoft observed a China-based actor using a previously unidentified malware framework in targeted intrusions against telcos, universities, medical, and government-related organizations.
Read at the source
Star Blizzard refines phishing and malware delivery with the RedFlick technique
Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capabilities through large-scale phishing campaigns, the use of accounts on compromised websites, and a novel malware delivery technique, tracked by Microsoft as “RedFlick”. The post Star Blizzard refines phishing and malware delivery with the RedFlick technique appeared first on Microsoft Security Blog.
Read at the source
Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers
The critical vulnerabilities, which impact default configurations of NetScaler products, essentially give attackers a skeleton key to customers' networks.
Read at the source
Podatność w oprogramowaniu Quick.Cart
W oprogramowaniu Quick.Cart wykryto podatność typu Cross-Site Request Forgery (CSRF) (CVE-2026-41875).
Read at the source
Podatność w oprogramowaniu MyPresta Google Merchant Center Feed
W oprogramowaniu MyPresta Google Merchant Center Feed wykryto podatność typu External control of file name or path (CVE-2026-85520).
Read at the source
Podatność w oprogramowaniu Ghostscript
W oprogramowaniu Ghostscript wykryto podatność typu Untrusted Search Path (CVE-2026-19547).
Read at the source
781-790 / 1673 news items shown