Aggregator

Fake Shipment Tracking Scams Surge in MEA, Stealing Banking Data Through Real-Time Phishing

Cyber Security News
3 months 1 week ago

Every day, billions of people rely on postal and courier services to deliver everything from personal letters to online orders. This dependence has grown steadily alongside the global rise of e-commerce. The 2024 Universal Postal Union report found that postal services now serve 7.3 billion people, and Statista recorded roughly 161 billion parcels shipped in […]

The post Fake Shipment Tracking Scams Surge in MEA, Stealing Banking Data Through Real-Time Phishing appeared first on Cyber Security News.

Tushar Subhra Dutta

Inside Nevada's Push for Secure Digital Government

BankInfoSecurity.com
3 months 1 week ago
State CIO Tim Galluzi on Identity Modernization, AI and Resident Services
The State of Nevada is accelerating its cybersecurity and digital modernization efforts after a major ransomware attack exposed the importance of resilience, workforce readiness and strong governance, said State CIO Tim Galluzi.

Beyond CVSS: OT Security Looks for Its Risk Methodology

BankInfoSecurity.com
3 months 1 week ago
Individual Vulnerability Severity Not Always a Good Measure of Risk Exposure
A mainstay of IT security programs across the world, the Common Vulnerability Scoring System, may have terminal flaws when applied to the mirror universe of operational technology - a place where ordinary assumptions about risk don't apply.

NY Sets 'First-of-Nation' Cyber Mandates for Water Sector

BankInfoSecurity.com
3 months 1 week ago
Program Offers Up to $100K for Security Upgrades and $50K for Assessments
New York is rolling out new cybersecurity regulations for water and wastewater utilities, requiring operators to conduct risk assessments and deploy security controls while offering $2.5 million in grants to strengthen defenses against rising cyberthreats targeting critical infrastructure.

US Lawmakers Call for CISA Polygraph Probe

BankInfoSecurity.com
3 months 1 week ago
House Democrats Demand Probe Into Former CISA Head Gottumukkala Poly Failures
Five U.S. Democratic lawmakers called for an investigation into a series of escalating controversies surrounding Cybersecurity and Infrastructure Security Agency leadership, following allegations that ex-Acting Director Madhu Gottumukkala bypassed established intelligence protocols.

Qilin

Dark Feed IO
3 months 1 week ago

You must login to view this content

cohenido

CVE-2026-4308 | frdel/agent0ai agent-zero 0.9.7 document_query.py handle_pdf_document server-side request forgery (EUVD-2026-12538)

VulDB Recent Entries
3 months 1 week ago
A vulnerability was found in frdel/agent0ai agent-zero 0.9.7. It has been rated as critical. This affects the function handle_pdf_document of the file python/helpers/document_query.py. This manipulation causes server-side request forgery. This vulnerability is tracked as CVE-2026-4308. The attack is possible to be carried out remotely. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2026-4307 | frdel/agent0ai agent-zero 0.9.7-10 python/helpers/files.py get_abs_path path traversal (EUVD-2026-12536)

VulDB Recent Entries
3 months 1 week ago
A vulnerability was found in frdel/agent0ai agent-zero 0.9.7-10. It has been declared as critical. The impacted element is the function get_abs_path of the file python/helpers/files.py. The manipulation results in path traversal. This vulnerability is identified as CVE-2026-4307. The attack can be executed remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2026-2454 | Mattermost up to 10.11.10/11.2.2/11.3.0 Websocket Message improper validation of specified type of input (EUVD-2026-12510)

VulDB Recent Entries
3 months 1 week ago
A vulnerability was found in Mattermost up to 10.11.10/11.2.2/11.3.0 and classified as problematic. Impacted is an unknown function of the component Websocket Message Handler. Executing a manipulation can lead to improper validation of specified type of input. The identification of this vulnerability is CVE-2026-2454. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-29522 | ZwickRoell Test Data Management up to 3.0.7 node_upgrade_srv.js firmware path traversal (EUVD-2026-12520)

VulDB Recent Entries
3 months 1 week ago
A vulnerability has been found in ZwickRoell Test Data Management up to 3.0.7 and classified as critical. This issue affects some unknown processing of the file /server/node_upgrade_srv.js. Performing a manipulation of the argument firmware results in path traversal. This vulnerability was named CVE-2026-29522. The attack needs to be approached locally. There is no available exploit. The affected component should be upgraded.
vuldb.com

Managed ad