Aggregator

⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More

The Hackers News
1 month 3 weeks ago
This week, the shadows moved faster than the patches. While most teams were still triaging last month’s alerts, attackers had already turned control panels into kill switches, kernels into open doors, and open-source pipelines into silent delivery systems. The game has shifted from breach to occupation. They’re living inside SaaS sessions, pushing code with trusted commits, and scaling
The Hacker News

4th May – Threat Intelligence Report

Check Point Research
1 month 3 weeks ago

For the latest discoveries in cyber research for the week of 4th May, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Medtronic, a global medical device maker, has disclosed a cyberattack on its corporate IT systems. An unauthorized party accessed data, while the company reported no impact on products, operations, or financial systems. Threat […]

The post 4th May – Threat Intelligence Report appeared first on Check Point Research.

urias

CVE-2026-24072 | Apache HTTP Server up to 2.4.66 .htaccess privileges management

VulDB Recent Entries
1 month 3 weeks ago
A vulnerability marked as problematic has been reported in Apache HTTP Server up to 2.4.66. Impacted is an unknown function of the component .htaccess Handler. The manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-24072. An attack has to be approached locally. There is no exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-33857 | Apache HTTP Server up to 2.4.66 mod_proxy_ajp out-of-bounds

VulDB Recent Entries
1 month 3 weeks ago
A vulnerability identified as critical has been detected in Apache HTTP Server up to 2.4.66. This vulnerability affects unknown code of the component mod_proxy_ajp. Performing a manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2026-33857. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.
vuldb.com

CVE-2026-7482 | Ollama up to 0.17.0 GGUF Model File Loader /api/create WriteTo out-of-bounds

VulDB Recent Entries
1 month 3 weeks ago
A vulnerability categorized as critical has been discovered in Ollama up to 0.17.0. This affects the function WriteTo of the file /api/create of the component GGUF Model File Loader. Such manipulation leads to out-of-bounds read. This vulnerability is documented as CVE-2026-7482. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.
vuldb.com

Managed ad