Aggregator

A vulnerability categorized as problematic has been discovered in Dell Secure Connect Gateway. This affects an unknown part. Executing a manipulation can lead to improper certificate validation. This vulnerability is registered as CVE-2026-79644. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

Criminals are using trusted Google services as cover for a wide phishing campaign that steals corporate credentials and, in some cases, installs remote-access software. The malicious path runs through Google-owned domains before reaching attacker-controlled pages for users and filters. The emails use familiar workplace themes, including document reviews, expiring mailboxes, package deliveries, payment notices, voicemail […]

The post Hackers Abuse Trusted Google Services to Hide Credential-Stealing Phishing Attacks appeared first on Cyber Security News.

A vulnerability was found in Dell Secure Connect Gateway. It has been rated as very critical. Affected by this issue is some unknown functionality. Performing a manipulation results in os command injection. This vulnerability is cataloged as CVE-2026-78488. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Dell Secure Connect Gateway. It has been declared as critical. Affected by this vulnerability is an unknown functionality. Such manipulation leads to missing authentication. This vulnerability is listed as CVE-2026-78480. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in Red Hat Directory Server and Enterprise Linux. It has been classified as very critical. Affected is an unknown function of the component 389-ds-base. This manipulation causes os command injection. This vulnerability is tracked as CVE-2026-19843. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in Red Hat 389 Directory Server and Enterprise Linux and classified as critical. This impacts the function op_shared_search of the component Paged Results Handler. The manipulation results in null pointer dereference. This vulnerability is identified as CVE-2026-18453. The attack can be executed remotely. There is not any exploit available.

A vulnerability has been found in Next4Biz Information CSM up to 07092026 and classified as critical. This affects an unknown function. The manipulation leads to path traversal. This vulnerability is referenced as CVE-2026-6377. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability, which was classified as very critical, was found in Red Hat Directory Server and Enterprise Linux up to 388. The impacted element is the function sasl_io_start_packet of the component SASL IO Layer. Executing a manipulation can lead to heap-based buffer overflow. The identification of this vulnerability is CVE-2026-18355. The attack may be launched remotely. There is no exploit available.

После атаки в Лейпциге власти ускоряют создание многоуровневой системы против гибридных угроз.

Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code built out of text. It still appears, even with images blocked. A small detail, but an annoying one if that was a precaution you were counting on. Elsewhere, a trusted software source delivered code that stole credentials, and a protocol designed for secure network management

Natural Resources Wales has disclosed a personal data breach involving a spreadsheet containing sensitive diversity information belonging to former and current employees. The incident affected people employed by Natural Resources Wales (NRW) between April 2013 and March 2018. The organization said the spreadsheet was inadvertently published online, making the information accessible before it was removed. […]

The post Natural Resources Wales Exposes Sensitive Employee Data in Spreadsheet Breach appeared first on Cyber Security News.

A vulnerability, which was classified as very critical, has been found in Dell Secure Connect Gateway. The affected element is an unknown function. Performing a manipulation results in hard-coded credentials. This vulnerability was named CVE-2026-80170. The attack may be initiated remotely. There is no available exploit.

Microsoft will retire support for Manifest V2 browser extensions in Microsoft Edge by early 2027, requiring users, enterprises, and developers to move to Manifest V3. The transition is intended to strengthen browser security, improve performance, and reduce the risks linked to legacy extension code. Microsoft announced the change in Message Center notification MC1467356, published on […]

The post Microsoft to Retire Manifest V2 Extensions and Switch to V3 for Improved Security and Performance appeared first on Cyber Security News.

由德国 Isar Aerospace 公司制造的 Spectrum 运载火箭 9 月 6 日从位于挪威北极圈内的 Andoya 航天发射场发射升空。该公司表示，“我们已进入轨道！并创造了欧洲航天史上的里程碑：这是欧洲大陆首次有私营企业研发的火箭成功进入轨道。”Spectrum 火箭专为运载中小型有效载荷而设计。此次发射任务搭载了五颗小型卫星以及一项飞行技术实验。这是这家德国公司第二次尝试将 Spectrum 火箭发射升空。首次尝试发生在 18 个月前，但未能成功。Spectrum 火箭发射成功被认为使欧洲向在本土提供商业卫星发射服务迈出了重要一步。包括英国和瑞典在内的多个国家都对日益增长的商业航天任务市场表现出了兴趣。Isar Aerospace 公司指出，去年美国共发射了 198 枚火箭，而欧洲的发射数量仅为 8 枚。Isar 的目标是实现年产约 40 枚火箭。

A vulnerability was found in decompress. It has been rated as problematic. This affects an unknown part of the component ZIP Handler. Performing a manipulation results in path traversal: '\..\filename'. This vulnerability is known as CVE-2026-10732. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in Tobit Laboratories TeamDavid up to Rollout 524. It has been rated as problematic. This impacts an unknown function of the component Send Email Functionality. Performing a manipulation of the argument scjob results in file inclusion. This vulnerability is reported as CVE-2026-12070. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability marked as critical has been reported in Tobit Laboratories TeamDavid up to Rollout 524. This affects an unknown part of the component Search Functionality. This manipulation of the argument pathnameroot causes improper input validation. This vulnerability is handled as CVE-2026-54204. The attack can be initiated remotely. There is not any exploit available.

A vulnerability classified as problematic has been found in Tobit Laboratories TeamDavid up to Rollout 524. This issue affects some unknown processing. Performing a manipulation results in improper authorization. This vulnerability was named CVE-2026-54201. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as problematic was found in Tobit Laboratories TeamDavid up to Rollout 524. Impacted is an unknown function of the file ServerClient_celink.htm of the component Link Storing Functionality. Executing a manipulation of the argument pathname can lead to improper input validation. The identification of this vulnerability is CVE-2026-54205. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as very critical, has been found in Tobit Laboratories TeamDavid up to Rollout 524. The affected element is an unknown function of the component Sending Email. The manipulation of the argument pathname leads to improper input validation. This vulnerability is referenced as CVE-2026-54206. Remote exploitation of the attack is possible. No exploit is available.