NewsThe Hacker News
Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses
More on Between
Other advisories
- MediumCVE-2026-62204SiYuan: Missing consistency check between packageName and repoURL/repoHash in bazaar package install allows overwriting an existing, trusted plugin
- HighCVE-2026-73054SiYuan: A parser differential between the WebSocket keepalive exemption and the session quarantine allows unauthenticated access to the broadcast event stream
- CriticalCVE-2026-111444Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies request data to inline-literal paths. These include opt-in parameterize=false queries and IN lists, and positions in developer-written where strings that the parser does not bind, such as BETWEEN bounds, function arguments and LIKE ESCAPE literals. Doubling single quotes without accounting for backslash escapes allows a value to alter the query. Bound paths are not affected; whereBetween() is bound from 4.1.2. This is fixed in 4.2.0.
- Not ratedCVE-2026-93169dmaengine: zynqmp_dma: fix race between runtime PM and device removal
- LowCVE-2026-98790perf: Fix race between perf_event_exit_task() and perf_pending_task()
- MediumCVE-2026-98507mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish
- Not ratedosv:CVE-2026-98790perf: Fix race between perf_event_exit_task() and perf_pending_task()
- Not ratedosv:CVE-2026-98507mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish
Other news entries
- Nobody Trusts the Security Questionnaire. We Rely on It Anyway.NewsSecurityWeek
- Nefilim and Hive ransomware affiliate gets 70 months in prisonNewsBleepingComputer
- In-the-Wild Attack Abuses AI Agents' Trust in MarkdownNewsDark Reading
- Stolen AI Reasoning Could Help China Build Cheaper RivalsNewsSecurityWeek
- Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a BotnetNewsThe Hacker News
- Meta hit with $25 billion fine for illegally sharing user dataNewsCSO Online
- Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring BackdoorNewsThe Hacker News
- Rank Math PRO WordPress Plugin Compromised in Supply Chain AttackNewsSecurityWeek
Source: https://thehackernews.com/2026/10/between-alerts-what-attackers-do-in.html
ID