NewsCisco Talos
I had plans for that second
Teaser from the source
The Earth is speeding up, the leap second is being abolished, oh, and there's critical vulnerabilities in PHP.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Cisco TalosMore on second
Other advisories
- MediumCVE-2026-120457libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder
- Not ratedosv:CVE-2026-120457libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder
- Not ratedosv:CLEANSTART-2026-KG14144DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by arranging for DNS queries to be accumulated for seconds, such that responses are ...
- Not ratedosv:CVE-2026-87768DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds
- MediumCVE-2026-118663@hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths
- MediumCVE-2026-118663@hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths
- Not ratedosv:CVE-2026-118663@hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths
- Not ratedosv:CVE-2026-61529Endatix: Blind second-order SSRF via anonymous form-submission file URLs (`SubmissionFileExtractor`)
Other news entries
- Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hourNewsThe Register — Security
- Attackers Exploit Second Cisco Firewall VPN Zero-Day Since AugustNewsSecurityWeek
- Polymarket halts trading after a compromised third-party provider drains user wallets through its websiteBreachpwn.watch
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution FlawNewsThe Hacker News
- LiteLLM release pipeline hacked to distribute credential-stealing malwareNewsCSO Online
- Zeabur shutting down after second security breach in two monthsNewsBleepingComputer
- Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offlineNewsThe Register — Security
- User refused to change her password because everyone already knew itNewsThe Register — Security
Source: https://blog.talosintelligence.com/i-had-plans-for-that-second/
ID