NewsSecurityWeek
In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach
More on Other
Other advisories
- Highosv:MAL-2026-19891Malicious code in dowload_ebok_toyota_kata_by_mike_rother_x5civ (npm)
- HighCVE-2026-63164Omnispace Agora Project through 26.10.0 contains an insecure direct object reference vulnerability that allows authenticated attackers to access another user…
- HighCVE-2026-116413Dell PowerStore contains a use-of-broken-cryptography vulnerability. A low-privileged attacker could exploit it to impersonate another identity, potentially …
- MediumCVE-2026-127123P-Net before 1.0.4 releases the Application Relationship of an RPC session, without the abort procedure, when a fragment of a request has another data repres…
- MediumCVE-2025-71461Zipline before 4.0.2 contains a predictable filename vulnerability that allows attackers to infer other users' upload filenames by recovering the Math.random…
- HighCVE-2026-126375Vvveb through 1.0.8.6 contains a missing authorization vulnerability that allows low-privilege vendors to rename, delete, or overwrite other vendors' digital…
- MediumCVE-2026-126376Vvveb 1.0.8.4 through 1.0.8.6 contains an incomplete authorization fix that allows low-privilege authors and vendors to access other users' records by bypass…
- MediumCVE-2026-126942Zipline before 4.6.2 contains a missing authorization vulnerability in POST /api/user/folders that allows authenticated users to reparent other users' files …
Other news entries
- PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCENewsThe Hacker News
- Microsoft Struggles to Restore Email and Other Services in a Global OutageNewsSecurityWeek
- AI Doesn’t Have to Go Rogue to Break the WorldNewsSchneier on Security
- An AI kill switch isn’t enough. Build a fallback planNewsCSO Online
- Microsoft 365 Outage Disrupts Outlook, Exchange Online and TeamsNewsSecurityWeek
- Trained to betray: How post-training supply chain attacks hijack coding agentsNewsMicrosoft Threat Intelligence
- Another Way Police Are Locating People from Their SmartphonesNewsSchneier on Security
- Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' DataNewsThe Hacker News
ID