Security News

Live news from trusted publications, matched against DayBreach CVE data.

All sourcesArs Technica · 67BleepingComputer · 183CERT Polska · 78Cisco Talos · 49CrowdStrike · 35Dark Reading · 78DataBreaches.net · 35Krebs on Security · 14Microsoft Security Blog · 39Proofpoint · 37Rapid7 · 70SANS Internet Storm Center · 57Security.NL · 330SecurityWeek · 88SentinelOne · 34The Cyber Express · 70TheCyberThrone · 60The Hacker News · 317The Record · 51Unit 42 · 48
The Hacker News1 mo ago

Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials

Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remote code execution. The vulnerability in question is CVE-2026-9586 (CVSS score: 9.3), a critical unauthenticated SQL injection vulnerability in Sangoma Switchvox SMB Edition 8.3 (104997) that can allow attackers to remotely execute arbitrary code as

Related Companies
S
sangoma logo
sangoma
İlgili CVE'ler
CVE-2026-9586
Read at the source
The Hacker News1 mo ago

Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads

The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-peer (P2P) botnet known as Sality as part of a coordinated law enforcement operation. The effort was undertaken on August 31, 2026, by authorities from the U.S., Bulgaria, Hungary, and Romania, in collaboration with private industry partners CrowdStrike and the Shadowserver Foundation. To that

Related Companies
F
forkhq logo
forkhq
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
Microsoft Security Blog1 mo ago

Counterfeit installers to system compromise: Tracking a deceptive software download campaign

An active campaign is impersonating legitimate software vendors to deliver malware through look-alike download pages and regenerated installer archives. Microsoft Defender Experts shares observed attack techniques, Defender XDR detections, indicators of compromise, and practical mitigations to help organizations identify, block, and respond to this threat. The post Counterfeit installers to system compromise: Tracking a deceptive software download campaign appeared first on Microsoft Security Blog.

Related Companies
P
phoca logo
phoca
A
adobe logo
adobe
O
octobercms logo
octobercms
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
Krebs on Security1 mo ago

FBI Probes Service Selling 153M+ Drivers Licenses

A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphoning images collected by a widely-used identity verification company based in Louisiana. KrebsOnSecurity also has learned that the New Orleans field office of the Federal Bureau of Investigation (FBI) today launched an official inquiry into the source of the images.

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

881-890 / 1661 news items shown