In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw
More on Other
Other advisories
- Not ratedosv:CVE-2026-85749MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mail
- MediumCVE-2026-112908filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold
- Not ratedCVE-2026-112908filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold
- MediumCVE-2026-112911filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion
- MediumCVE-2026-112911filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion
- MediumCVE-2026-112939filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker
- MediumCVE-2026-112939filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker
- MediumCVE-2026-112909filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path
Other news entries
- Imposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secretsNewsCSO Online
- Shadowy AI Relay Disables OpenAI Codex, Claude Code SandboxesNewsDark Reading
- Oracle celebrates end of Cybersecurity Awareness Month with quadruple troubleNewsThe Register — Security
- Yet Another ClickFix Campaign, (Wed, Oct 28th)NewsSANS ISC Diary
- Attacker Relentlessly Scans for Credentials by Impersonating AI BotsNewsDark Reading
- InfraTrust report warns of exploited flaws in critical network infrastructureNewsBleepingComputer
- Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other ServersNewsThe Hacker News
- Cyberattack on Belgium's tax agency FOD Financiën takes MyMinfin offlineBreachpwn.watch
ID