In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation
More on Other
Other advisories
- Highghsa:GHSA-r4xp-prcw-77qfbetter-auth: OAuth Proxy lets an attacker sign in as another user
- CriticalCVE-2026-110864better-auth: OAuth Proxy lets an attacker sign in as another user
- CriticalCVE-2026-114607better-auth: OAuth state can be used as a Magic Link to sign in as another user
- CriticalCVE-2026-114607better-auth: OAuth state can be used as a Magic Link to sign in as another user
- MediumCVE-2026-60083SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files
- MediumCVE-2026-60083SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files
- MediumCVE-2026-88781ASUS motherboards firmware: Dereferenzierung nicht vertrauenswürdiger Zeiger
- MediumCVE-2026-88781ASUS motherboards firmware: Dereferenzierung nicht vertrauenswürdiger Zeiger
Other news entries
- Yet Another ClickFix Campaign, (Wed, Oct 28th)NewsSANS ISC Diary
- Attacker Relentlessly Scans for Credentials by Impersonating AI BotsNewsDark Reading
- InfraTrust report warns of exploited flaws in critical network infrastructureNewsBleepingComputer
- Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other ServersNewsThe Hacker News
- Amplitude analytics security incident exposes Coinbase customer contact dataBreachpwn.watch
- OpenAI's GPT-6.1 Terra is safer overall, but shows more destructive-action flags in testsNewsBleepingComputer
- This is Fine: What NetScaler Zero-Days Tell Us About the New NormalNewsSecurityWeek
- The days of assuming another company’s breach is someone else’s problem are overNewsCSO Online
ID