NewsSANS ISC Diary
HTTP QUERY Method: The Grey Zone Between GET And POST., (Fri, Sep 18th)
Teaser from the source
In June 2026 the IETF published RFC 10008[1], defining a new HTTP method: "QUERY". The HTTP protocol faced already by changes (HTTP/2, HTTP/3) but it's the first new standard HTTP verb since "PATCH" in 2010!
This is the RSS-feed teaser. Read the full article at the original source.
Read at SANS ISC DiaryMore on Method
Other advisories
- HighCVE-2026-118904IBM webMethods Integration Server: unzureichende Authentifizierung
- HighCVE-2026-118904IBM webMethods Integration Server: unzureichende Authentifizierung
- HighCVE-2026-117545IBM webMethods Integration Server: unzureichende Authentifizierung
- HighCVE-2026-117545IBM webMethods Integration Server: unzureichende Authentifizierung
- HighCVE-2026-120422Sogou Input Method: Codeausführung
- HighCVE-2026-120422Sogou Input Method: Codeausführung
- MediumCVE-2026-99222keys: Protect the read method check against type removal
- Not ratedosv:CVE-2026-120637CGI versions before 5.00 for Perl take request parameters from the process command line arguments for an unrecognised REQUEST_METHOD
Other news entries
- SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN LoginsNewsSecurityWeek
- Closing the Identity Gap at the Service DeskNewsBleepingComputer
- China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil BackdoorNewsThe Hacker News
- SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malwareNewsESET WeLiveSecurity
- Report: Cyberkriminelle nehmen Rechtssektor ins VisierNewsheise Security
- Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own WinNewsThe Hacker News
- Microsoft urges Entra ID admins to migrate users to passkeysNewsBleepingComputer
- What EvilTokens teaches us about defending against AI-assisted attacksNewsCSO Online
Source: https://isc.sans.edu/diary/rss/33352
ID