Aggregator
Тысячи крошечных ушей в океане. Как новые гидроакустические буи США превращают воду в гигантскую ловушку для подводных лодок
2 months ago
Новый буй слышит то, что раньше было недоступно.
Why Intelligence Requirements Fall Flat and How to Fix Them with a Practical Priority Intelligence Requirements Framework
2 months ago
Blogs Blog Why Intelligence Requirements Fall Flat and How to Fix Them with a Practical Priority Intelligence Requirements Framework In this post, we examine why intelligence requirements often fail to drive decisions and how to operationalize Priority Intelligence Requirements to align collection, analysis, and action. Begin your free trial today. Contact Sales
The post Why Intelligence Requirements Fall Flat and How to Fix Them with a Practical Priority Intelligence Requirements Framework appeared first on Flashpoint.
The post Why Intelligence Requirements Fall Flat and How to Fix Them with a Practical Priority Intelligence Requirements Framework appeared first on Security Boulevard.
Flashpoint
Qilin
2 months ago
You must login to view this content
cohenido
Qilin
2 months ago
You must login to view this content
cohenido
Qilin
2 months ago
You must login to view this content
cohenido
Tenable security advisory (AV26-336) – Update 1
2 months ago
Canadian Centre for Cyber Security
Дезинформация как предлог, цензура как практика. Что стоит за мировым соглашением Минюста США по делу о государственном вмешательстве в онлайн-дискуссии
2 months ago
Как Госдеп во времена Джо Байдена помогал соцсетям прятать неудобные публикации.
CVE-2026-23891 | Decidim up to 0.30.4/0.31.0 Name cross site scripting (GHSA-fc46-r95f-hq7g)
2 months ago
A vulnerability classified as problematic was found in Decidim up to 0.30.4/0.31.0. This issue affects some unknown processing. Executing a manipulation of the argument Name can lead to cross site scripting.
This vulnerability is handled as CVE-2026-23891. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is advised.
vuldb.com
CVE-2026-33555 | HAProxy up to 3.3.5 HTTP3 Parser length parameter
2 months ago
A vulnerability classified as problematic has been found in HAProxy up to 3.3.5. This vulnerability affects unknown code of the component HTTP3 Parser. Performing a manipulation results in improper handling of length parameter inconsistency.
This vulnerability is known as CVE-2026-33555. Remote exploitation of the attack is possible. No exploit is available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2026-36952 | SourceCodester Online Thesis Archiving System 1.0 manage_curriculum.php sql injection
2 months ago
A vulnerability described as critical has been identified in SourceCodester Online Thesis Archiving System 1.0. This affects an unknown part of the file /otas/admin/curriculum/manage_curriculum.php. Such manipulation leads to sql injection.
This vulnerability is traded as CVE-2026-36952. The attack may be launched remotely. There is no exploit available.
vuldb.com
CVE-2026-36950 | SourceCodester Online Thesis Archiving System 1.0 projects_per_department.php sql injection
2 months ago
A vulnerability marked as critical has been reported in SourceCodester Online Thesis Archiving System 1.0. Affected by this issue is some unknown functionality of the file /otas/projects_per_department.php. This manipulation causes sql injection.
This vulnerability appears as CVE-2026-36950. The attack may be initiated remotely. There is no available exploit.
vuldb.com
CVE-2026-36948 | SourceCodester Online Thesis Archiving System 1.0 /otas/view_archive.php sql injection
2 months ago
A vulnerability labeled as critical has been found in SourceCodester Online Thesis Archiving System 1.0. Affected by this vulnerability is an unknown functionality of the file /otas/view_archive.php. The manipulation results in sql injection.
This vulnerability is reported as CVE-2026-36948. The attack can be launched remotely. No exploit exists.
vuldb.com
CVE-2026-39940 | ChurchCRM up to 6.x DonatedItemEditor.php redirect (GHSA-5g52-rvjf-6wwf)
2 months ago
A vulnerability identified as problematic has been detected in ChurchCRM up to 6.x. Affected is an unknown function of the file DonatedItemEditor.php. The manipulation leads to open redirect.
This vulnerability is documented as CVE-2026-39940. The attack can be initiated remotely. There is not any exploit available.
You should upgrade the affected component.
vuldb.com
OpenAI rotates macOS certs after Axios attack hit code-signing workflow
2 months ago
OpenAI is rotating potentially exposed macOS code-signing certificates after a GitHub Actions workflow executed a malicious Axios package during a recent supply chain attack. [...]
Lawrence Abrams
International Insurer VUMI Group Allegedly Breached, 300K Policyholders and 25K Staff Exposed With SSNs, Passports, and W-9 Forms
2 months ago
International Insurer VUMI Group Allegedly Breached, 300K Policyholders and 25K Staff Exposed With SSNs, Passports, and W-9 Forms
Dark Web Informer
wolfSSL security advisory (AV26-344)
2 months ago
Canadian Centre for Cyber Security
New Booking.com data breach forces reservation PIN resets
2 months ago
Booking.com has confirmed via a statement to BleepingComputer that it has detected unauthorized access to its systems that has exposed sensitive reservation and user data. [...]
Bill Toulas
Dell security advisory (AV26-343)
2 months ago
Canadian Centre for Cyber Security
JanelaRAT Malware Targets Latin American Banks with 14,739 Attacks in Brazil in 2025
2 months ago
Banks and financial institutions in Latin American countries like Brazil and Mexico have continued to be the target of a malware family called JanelaRAT.
A modified version of BX RAT, JanelaRAT is known to steal financial and cryptocurrency data associated with specific financial entities, as well as track mouse inputs, log keystrokes, take screenshots, and collect system metadata.
"One of the
The Hacker News