Posts of last few hours
Please support the site operations by clicking ads.
Name: Hacker's Gambit 2026 (Round 2 – Grand Finale) (an Hacker's Gambit event.)
Date: Oct. 30, 2026, 6:30 a.m. — 31 Oct. 2026, 06:30 UTC [add to calendar]
Format: Jeopardy
On-site
Location: Jaihind College of Engineering,At Post Kuran, Taluka Junnar, Pune - 410511, Maharashtra, India (19°09'47.2"N 73°54'52.2"E)
Offical URL: https://unstop.com/p/hackers-gambit-2026-jaihind-college-of-engineering-kuran-1723293
Rating weight: 0.00
Event organizers: JCOE Cyber Sentinels
Date: Oct. 30, 2026, 6:30 a.m. — 31 Oct. 2026, 06:30 UTC [add to calendar]
Format: Jeopardy
On-site
Location: Jaihind College of Engineering,At Post Kuran, Taluka Junnar, Pune - 410511, Maharashtra, India (19°09'47.2"N 73°54'52.2"E)
Offical URL: https://unstop.com/p/hackers-gambit-2026-jaihind-college-of-engineering-kuran-1723293
Rating weight: 0.00
Event organizers: JCOE Cyber Sentinels
https://ctftime.org/event/3381
Name: HAM-DEFCON (an HAM-DEFCON event.)
Date: Oct. 31, 2026, 3:30 a.m. — 31 Oct. 2026, 07:30 UTC [add to calendar]
Format: Attack-Defense
On-site
Location: National Institute Of Technology Warangal, Hanamkonda, Telangana, India, 505004
Offical URL: http://defcon.hamarc.tech/
Rating weight: 0
Event organizers: HAMARC
Date: Oct. 31, 2026, 3:30 a.m. — 31 Oct. 2026, 07:30 UTC [add to calendar]
Format: Attack-Defense
On-site
Location: National Institute Of Technology Warangal, Hanamkonda, Telangana, India, 505004
Offical URL: http://defcon.hamarc.tech/
Rating weight: 0
Event organizers: HAMARC
https://ctftime.org/event/3491
Hackers are attempting to exploit an unauthenticated remote code execution vulnerability in WordPress Core, targeting a brief exposure window during software updates. The supplied Wordfence record reports 58,693 blocked attacks within 24 hours, representing nearly 60,000 attempts rather than confirmed successful compromises. WordPress released version 7.1.4 on October 28, 2026, addressing 22 security vulnerabilities. The […]
The post WordPress RCE Vulnerability Under Active Attack With Over 58,000 Exploit Attempts Blocked appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
https://gbhackers.com/wordpress-rce-vulnerability-2/
Russia-aligned threat actors are exploiting a flaw in MDaemon mail server software to run code on the server. Victims don’t have to open or click anything. ESET’s APT Activity Report for Q2–Q3 2026 describes an active campaign in Ukraine. ESET could not attribute it to a known Russia-aligned group. Mdaemon mail server flaw According to […]
The post Russian Hackers Exploit MDaemon Mail Server Flaw to Install Backdoors Without User Interaction appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
https://gbhackers.com/mdaemon-mail-server-flaw/
原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
https://govuln.com/news/url/x8dB
Why Millions of Cybersecurity Jobs Go Unfilled as Talent Struggles to Advance
Cybersecurity's hiring crisis extends beyond workforce shortages. Unrealistic job descriptions exclude newcomers, weak succession planning stalls future CISOs and burnout strains existing teams. Rethinking entry-level requirements and leadership development can help break the cycle.
Cybersecurity's hiring crisis extends beyond workforce shortages. Unrealistic job descriptions exclude newcomers, weak succession planning stalls future CISOs and burnout strains existing teams. Rethinking entry-level requirements and leadership development can help break the cycle.
https://ransomware.databreachtoday.com/blogs/elephants-in-technology-room-part-6-p-4235
Hims & Hers Defends Sharing Sensitive Health Data. America Shrugs and Clicks Agree.
Hims & Hers says its privacy policy warned users their sex lives could become advertising intelligence. The FTC alleges Meta got the data. But with Americans resigned to losing their privacy, perhaps Silicon Valley's biggest achievement is convincing us to click "I Agree.
Hims & Hers says its privacy policy warned users their sex lives could become advertising intelligence. The FTC alleges Meta got the data. But with Americans resigned to losing their privacy, perhaps Silicon Valley's biggest achievement is convincing us to click "I Agree.
https://ransomware.databreachtoday.com/blogs/your-sex-life-none-metas-business-p-4236
New Mexico, Ohio Ransomware Attacks Raise Concerns as Feds Settle Pennsylvania Case
Cyber incidents at university health systems in New Mexico and Ohio disrupted patient care and sparked data theft concerns and litigation. Meanwhile, a Pennsylvania health system faces an $800,000 HIPAA settlement over a 2023 ransomware attack that exposed sensitive cancer patient photos.
Cyber incidents at university health systems in New Mexico and Ohio disrupted patient care and sparked data theft concerns and litigation. Meanwhile, a Pennsylvania health system faces an $800,000 HIPAA settlement over a 2023 ransomware attack that exposed sensitive cancer patient photos.
https://ransomware.databreachtoday.com/hospital-cyberattacks-bring-disruptions-legal-fallout-a-33265
Financial Firms Face Pressure to Balance Customer Access With Data Protection
The lack of reliable ways to identify an artificial intelligence agent has caused many companies, especially banks and other financial institutions, to block most agent traffic amid rising interest in agents from enterprises and regular consumers.
The lack of reliable ways to identify an artificial intelligence agent has caused many companies, especially banks and other financial institutions, to block most agent traffic amid rising interest in agents from enterprises and regular consumers.
https://ransomware.databreachtoday.com/ai-agent-identity-crisis-forces-banks-to-restrict-access-a-33266
Also: US Healthcare Faces New Risks, Anthropic's Cloud Dependence Raises AI Risks
In this week's panel, four ISMG editors discussed the PHP2Shell threat and the "Black October" attacks, U.S. healthcare cybersecurity and deregulation, and what Anthropic's newly disclosed financials reveal about its business model and dependence on major cloud providers.
In this week's panel, four ISMG editors discussed the PHP2Shell threat and the "Black October" attacks, U.S. healthcare cybersecurity and deregulation, and what Anthropic's newly disclosed financials reveal about its business model and dependence on major cloud providers.
https://ransomware.databreachtoday.com/ismg-editors-php2shell-fuels-cybersecuritys-black-october-a-33267
French Startup Estimates RSA-2048 Could Fall in Three Days With 23,000 Qubits
French quantum computing startup Alice & Bob estimates that 23,000 cat qubits could break RSA-2048 encryption in three days, while 30,000 could defeat blockchain elliptic-curve cryptography in an hour, raising concerns about long-term data security and cryptocurrency exposure.
French quantum computing startup Alice & Bob estimates that 23,000 cat qubits could break RSA-2048 encryption in three days, while 30,000 could defeat blockchain elliptic-curve cryptography in an hour, raising concerns about long-term data security and cryptocurrency exposure.
https://ransomware.databreachtoday.com/alice-bob-claims-new-benchmark-for-breaking-rsa-2048-in-days-a-33268
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it.
The post Inside a malicious Claude Code-branded extension and its persistent SSH backdoor appeared first on Microsoft Security Blog.
https://www.microsoft.com/en-us/security/blog/2026/10/30/inside-malicious-claude-code-branded-cursor-extension-persistent-ssh-backdoor/
人待在舒服的位置久了，是会变钝的。那年我正安逸，顺手在笔记里写下九个字：呆得太爽，就会有问题。如今回头看，那句话比什么鸡汤都管用。
https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247488170&idx=1&sn=e8cfbe6819f9d7fd73047531c6a31aea
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners. [...]
https://www.bleepingcomputer.com/news/security/critical-linux-kernel-flaw-allows-remote-root-attacks-on-mptcp-servers/
Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs).
https://www.darkreading.com/cyberattacks-data-breaches/devs-trojanized-claude-code-extension-cursor
A recent law enforcement operation to dismantle harmful scam centers was a big success. A threat intelligence expert walks us through what happened and why he wants more of the same.
https://www.darkreading.com/cybersecurity-operations/behind-the-scenes-how-operation-blackout-went-down
https://www.akamai.com/blog/ai/2026/oct/frontier-ai-accelerated-attacks-agentic-web-mcp-surface
Некоторые дополнения не требуют опасных разрешений и скрываются от поиска в официальном магазине.
https://www.securitylab.ru/news/579469.php
Квантовая загадка 1964 года получила новые доказательства.
https://www.securitylab.ru/news/579468.php
An actor using the handle "d00101" claims to have leaked approximately 6.9 GB of data associated with Bangkok Post, including member data and internal infrastructure material.
https://darkwebinformer.com/bangkok-post-breach-claim-includes-822-140-member-accounts-and-6-9-gb-infrastructure-dump/
Latest Blog Posts
- 1 day 8 hours ago
- 1 day 8 hours ago
- 1 day 8 hours ago
- 1 day 8 hours ago
- 1 day 8 hours ago
- 1 day 8 hours ago
- 1 day 8 hours ago
- 1 day 8 hours ago
- 1 day 8 hours ago
- 1 day 8 hours ago