Aggregator

Breach Roundup: Cambodia Scam Center Crackdown

BankInfoSecurity.com
4 months ago
Also: EU Bans AI Tools, Notepad++ Secures Updater, Apple Patches iOS Zero-Day
This week, Cambodia shuttered 200 scam centers. EU Parliament banned AI tools. Canada Goose disputed a ShinyHunters leak. Notepad++ patched an updater flaw. Apple fixed a decades-old iOS zero-day. BeyondTrust and Dell patched critical flaws under active exploitation.

Treasury AI Plan Faces Calls for Enforceable Controls

BankInfoSecurity.com
4 months ago
Analysts Urge Mandatory Guardrails on AI Agents, Identity and Privilege
Security leaders are pressing Treasury to embed enforceable guardrails - covering adversarial testing, AI inventory, identity privilege mapping and real-time monitoring - into its forthcoming financial-sector AI guidance as deepfake fraud, data poisoning and autonomous agent risks escalate.

Univ. of Mississippi Medical Center Dealing With Cyberattack

BankInfoSecurity.com
4 months ago
Hospital, ER Open but All Clinics, Elective Care Cancelled Statewide; FBI Called In
The University of Mississippi Medical Center on Thursday said a ransomware attack has triggered its emergency operations plan and forced its hospitals to cancel all clinic and elective procedures at all locations statewide.

Red Flags for OT Abound in Dragos Review of 2025

BankInfoSecurity.com
4 months ago
Ransomware, Lack of Visibility, Mischaracterizations and Nation-States, Oh My
There is a silent epidemic of ransomware attacks on commercial operational technology systems, which are mischaracterized as IT incidents even though they impact operational systems, claims a comprehensive annual review of cyberattacks targeting OT, published this week by security firm Dragos.

Splunk Enterprise for Windows Vulnerability Let Attackers Hijack DLLs and Gain SYSTEM Access

Cyber Security News
4 months ago

Splunk has disclosed a high-severity vulnerability in Splunk Enterprise for Windows that allows a low-privileged local user to escalate their privileges to SYSTEM level through a DLL search-order hijacking attack. Tracked as CVE-2026-20140 and published on February 18, 2026, under advisory SVD-2026-0205, the flaw carries a CVSSv3.1 score of 7.7 (High) and is classified under […]

The post Splunk Enterprise for Windows Vulnerability Let Attackers Hijack DLLs and Gain SYSTEM Access appeared first on Cyber Security News.

Guru Baran

CVE-2026-26273 | idno known up to 1.6.2 Password Reset Page information disclosure

Vuldb Updates
4 months ago
A vulnerability labeled as problematic has been found in idno known up to 1.6.2. Affected by this vulnerability is an unknown functionality of the component Password Reset Page. Such manipulation leads to information disclosure. This vulnerability is referenced as CVE-2026-26273. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.
vuldb.com

CVE-2026-24853 | Caido up to 0.54.x Service Port 8080 X-Forwarded-Host authentication spoofing (GHSA-3q5q-p8vj-8783)

Vuldb Updates
4 months ago
A vulnerability marked as critical has been reported in Caido up to 0.54.x. Affected is an unknown function of the component Service Port 8080. Performing a manipulation of the argument X-Forwarded-Host results in authentication bypass by spoofing. This vulnerability was named CVE-2026-24853. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.
vuldb.com

Managed ad