Siber Güvenlik Haberleri

AshSqlite Vulnerability (CVE-2026-77846) Exposes Hidden JSON Fields

CVE-2026-77846, a newly disclosed AshSqlite vulnerability, can allow attackers to access hidden or sensitive fields stored inside JSON and map columns when applications pass untrusted input to AshSqlite's get_path/2 functionality. The Erlang Ecosystem Foundation's CNA issued the vulnerability entry on August 30, 2026. The issue affects AshSqlite, the SQLite data layer used by the Ash Framework. Although it involves database queries, CVE-2026-77846 is not SQL injection. Instead, the AshSqlite vulnerability results from unsafe construction of JSON paths and the way SQLite interprets special char

İlişkili Şirketler

A

ash-project

J

joyent

R

ruby

R

rubygems

N

n/a

R

ruby-lang

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

A China-nexus cyber espionage actor tracked as Fire Ant has expanded a long-running campaign beyond VMware hypervisors to compromise Cisco IOS XR routers, Terminal Access Controller Access-Control System (TACACS) servers, and Linux management hosts used to route, authenticate, and manage high-value networks. Sygnia, the incident response firm that investigated the intrusion, said the actor

İlişkili Şirketler

A

asus

A

apache

D

d-link

S

Soft-Machine-io

C

cisco

S

stealjs

G

gentoo

PaperCut publiceert tweede noodpatch wegens aanvallen op NG/MF-servers

Softwarebedrijf PaperCut heeft een tweede noodpatch uitgebracht wegens aanvallen op PaperCut NG/MF-servers. PaperCut NG en MF ...

İlişkili Şirketler

P

PaperCut

Datalek CJIB na koppelen verkeersovertredingen en strafzaken aan verkeerde personen

Het Centraal Justitieel Incassobureau heeft bij de Autoriteit Persoonsgegevens een voorlopige melding van een datalek gedaan ...

Rabobank gaat fysieke passkey voor betaalopdrachten ondersteunen

De Rabobank gaat fysieke passkeys, zoals een usb-sleutel, ondersteunen voor het uitvoeren van betaalopdrachten. Dat laat de ...

İlişkili Şirketler

B

better-auth

DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims

The U.S. Department of Justice (DoJ) on Friday corrected a previously issued press statement that several of its agencies were victims of attacks carried out by Chinese threat actors, instead now pointing out that they were among those targeted. Last week, the DoJ said the National Aeronautics and Space Administration, Federal Reserve, Department of Energy, Department of Justice, Department

İlişkili Şirketler

I

ivanti

Anthropic waarschuwt Claude-gebruikers voor malware die tokens steelt

AI-bedrijf Anthropic waarschuwt Claude-gebruikers voor infostealer-malware die van gecompromitteerde accounts tokens steelt. ...

İlişkili Şirketler

A

anthropic

Bits of Freedom: Burger steeds makkelijker op radar van geheime diensten

Burgers komen steeds makkelijker op de radar van de geheime diensten met minder waarborgen, dat stelt burgerrechtenbeweging ...

İlişkili Şirketler

S

skyhook-io

McKesson Data Breach 2026: What We Know So Far

McKesson Corporation has disclosed a cybersecurity incident that has raised concerns over the potential exposure of a large volume of healthcare and business data. The company discovered the incident on…

Agents of Chaos: A New $100K Agentic Security Challenge

İlişkili Şirketler

S

Soft-Machine-io

G

gentoo