NewsSecurityWeek
In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach
More on Other
Other advisories
- Not ratedosv:CLEANSTART-2026-AZ15174There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause Mem...
- Not ratedosv:CLEANSTART-2026-FS91009For HTTP/1 servers, when MaxBytesReader's limit is exceeded, "Connection: close" header is automatically set without synchronization, which might race with another header being set explicitly in th...
- Highosv:MAL-2026-19891Malicious code in dowload_ebok_toyota_kata_by_mike_rother_x5civ (npm)
- HighCVE-2026-63164Omnispace Agora Project through 26.10.0 contains an insecure direct object reference vulnerability that allows authenticated attackers to access another user…
- HighCVE-2026-116413Dell PowerStore contains a use-of-broken-cryptography vulnerability. A low-privileged attacker could exploit it to impersonate another identity, potentially …
- MediumCVE-2026-127123P-Net before 1.0.4 releases the Application Relationship of an RPC session, without the abort procedure, when a fragment of a request has another data repres…
- MediumCVE-2025-71461Zipline before 4.0.2 contains a predictable filename vulnerability that allows attackers to infer other users' upload filenames by recovering the Math.random…
- HighCVE-2026-126375Vvveb through 1.0.8.6 contains a missing authorization vulnerability that allows low-privilege vendors to rename, delete, or overwrite other vendors' digital…
Other news entries
- The firewall becomes the foothold: Attackers turn Check Point gateways against customersNewsCSO Online
- PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCENewsThe Hacker News
- Microsoft Struggles to Restore Email and Other Services in a Global OutageNewsSecurityWeek
- AI Doesn’t Have to Go Rogue to Break the WorldNewsSchneier on Security
- An AI kill switch isn’t enough. Build a fallback planNewsCSO Online
- Microsoft 365 Outage Disrupts Outlook, Exchange Online and TeamsNewsSecurityWeek
- Trained to betray: How post-training supply chain attacks hijack coding agentsNewsMicrosoft Threat Intelligence
- Another Way Police Are Locating People from Their SmartphonesNewsSchneier on Security
ID