NewsDark Reading
Windows Zero-Day Barrage Continues After Patch Tuesday
Teaser from the source
YellowKey, GreenPlasma, and MiniPlasma add to the growing list of vulnerabilities a security researcher disclosed over the past six weeks.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Dark ReadingMore on Continues
Other advisories
- HighCVE-2026-128132AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the WebSocket reader continues parsing frames already receiv…
- HighCVE-2026-94439When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues t…
- Not ratedosv:CVE-2026-107284AsyncHttpClient: WebSocket handshake continues after a failed Sec-WebSocket-Accept check
- MediumCVE-2026-91982Vikunja before 2.6.0 continues to expose the raw TOTP shared secret after enrollment through the GET /api/v1/user/settings/totp and /api/v1/user/settings/tot…
- HighCVE-2026-24451Gitea: Fork Synchronization Continues After Parent Repository Changes from Public to Private in code.gitea.io/gitea
- HighCVE-2026-55833Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation
- HighCVE-2026-24451Gitea: Fork Synchronization Continues After Parent Repository Changes from Public to Private
- Not ratedosv:CVE-2026-55833Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation
Other news entries
- Microsoft Patch Tuesday November 2026, (Tue, Nov 10th)NewsSANS ISC Diary
- Chrome zero-day whack-a-mole continues as 2026 tally hits 8NewsThe Register — Security
- Queens Public Library ransomware: checkouts and Wi-Fi restored; website, app and PCs still downBreachpwn.watch
- PHP2Shell plus Fragnesia: A dangerous new route from web server to rootNewsCSO Online
- Tracking AI adoption in North Korean threat actor tradecraftNewsMicrosoft Threat Intelligence
- Ireland's Employment Permits Portal breach: stolen data for general customers limited to namesBreachpwn.watch
- Bubble says an attacker accessed users' third-party API keys and tokens in an active security incidentBreachpwn.watch
- University Hospitals (Cleveland) takes systems offline after "unusual activity" (unconfirmed)Breachpwn.watch
ID