Aggregator

Progress Software, the provider of the popular file-sharing and data storage solutions, has urged customers to shut down the server hosting their Storage Zone Controller

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

• CVE-2008-4128 Cisco IOS Cross-Site Request Forgery Vulnerability

This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.

Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA’s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.

While BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

Aware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA’s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance. 

New advisory highlights Russian state cyber actors’ global exploitation of poorly configured routers

Meta has filed a patent application for an AI that listens to your voice throughout the day, works out how it thinks you are feeling from the way you sound, and keeps a timestamped log of every read. Each read gets pinned to the moment it happened: the time, your location, what you were doing, even how you were using your phone. Some versions in the filing would listen all day; others would

Linus Torvalds 曾说过大模型（LLM）会让程序员的生产力提升十倍。他在 2026 年印度开源峰会上说，这个数字并不科学，是他随口胡扯的。他说如今的希望是 LLM 给程序员带来的生产力提升能超过其造成的生产力损失。他说，大模型生成的垃圾远多于有用代码，而 AI 生成的 bug 报告浪费了维护者大量的时间精力。Torvalds 称大量 LLM 生成的补丁是无意义的创可贴，或许能解决当前问题，但类似 bug 仍然留在那里，随时可能在其他地方再次出现。他称自己会用 LLM 制作原型，LLM 生成的代码并不能直接使用，但是一个尝试新想法的好方法。他认为 LLM 还无法生成修复内核 bug 的补丁。

A “credible external security threat” targeting Progress Software’s ShareFile Storage Zone Controllers (SZC) – the on-premises, customer-managed server components where organizations store files shared via this popular enterprise platform – has spurred the company to disable access to ShareFile accounts that are using them. The warning was sent to customers via email on July 10, urging them to manually shut down the server that is hosting their Storage Zone Controllers. The initial email alert from … More →

The post Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down servers appeared first on Help Net Security.

A digital forensics investigation from Belkasoft into an iPhone and a damaged MacBook has helped secure the conviction of Jason Cunningham, a rent-to-rent property operator who defrauded landlords and investors of more than £113,000 through forged contracts and false promises. Cunningham ran several companies in the rent-to-rent sector, leasing properties from landlords and subletting them […]

The post iPhone and MacBook Forensics Investigation Exposes £113,000 Property Fraud Operation appeared first on Cyber Security News.

A few days ago, I was sitting with the CISO of a Fortune 50 company, walking through how his security team was thinking about AI agents in the SOC. Smart team. Serious program. They had already connected Claude to a few detection tools and were seeing real value in specific investigations. But as we mapped out the broader architecture, something kept nagging at me. The design they were building

A vulnerability was found in Villame Abandoned Cart Recovery for WooCommerce Plugin up to 1.1.12 on WordPress. It has been declared as problematic. Affected is an unknown function. Executing a manipulation can lead to improper authentication. This vulnerability is tracked as CVE-2026-57698. The attack can be launched remotely. No exploit exists.

A vulnerability, which was classified as problematic, has been found in UltraVNC Viewer 1.2.4.0. The impacted element is an unknown function. This manipulation causes allocation of resources. This vulnerability is tracked as CVE-2020-37134. The attack is possible to be carried out remotely. Moreover, an exploit is present. It is advisable to upgrade the affected component.

A vulnerability classified as problematic has been found in Intel Processor. Affected by this issue is some unknown functionality. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2025-35979. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in UltraVNC 1.6.4.0 on Windows. It has been classified as problematic. This affects an unknown function in the library cryptbase.dll of the component Windows Service. This manipulation causes uncontrolled search path. This vulnerability appears as CVE-2026-3787. The attack requires local access. In addition, an exploit is available. Upgrading the affected component is recommended. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability described as critical has been identified in PostgreSQL. Affected by this vulnerability is an unknown functionality of the component Execute Permission Handler. The manipulation results in sql injection. This vulnerability was named CVE-2019-10208. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in KeePass up to 2.53. This affects an unknown function of the component XML Configuration File Handler. This manipulation causes missing encryption of sensitive data. The identification of this vulnerability is CVE-2023-24055. The attack needs to be done within the local network. There is no exploit available. There are still doubts about whether this vulnerability truly exists. It is suggested to upgrade the affected component.

A vulnerability categorized as problematic has been discovered in GIMP. This affects an unknown part of the component TIM Loader. Executing a manipulation can lead to integer overflow. This vulnerability is registered as CVE-2026-59089. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

Алекс Карп заявил, что бизнес переплачивает за токены, теряет контроль над данными и всё чаще выбирает открытые модели.

A vulnerability, which was classified as critical, has been found in meMove Brook Plugin up to 2.9.0 on WordPress. This affects the function include of the component Include/Require Statement. Performing a manipulation of the argument filename results in file inclusion. This vulnerability was named CVE-2026-57791. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as critical was found in meMove Billey Plugin up to 2.1.8 on WordPress. Affected by this issue is the function include/require of the component Include/Require Statement. Such manipulation of the argument filename leads to file inclusion. This vulnerability is uniquely identified as CVE-2026-57790. The attack can be launched remotely. No exploit exists.

A vulnerability classified as critical has been found in jwsthemes Aqua Plugin up to 5.1.2 on WordPress. Affected by this vulnerability is an unknown functionality of the component Include/Require Statement. This manipulation of the argument filename causes file inclusion. This vulnerability is handled as CVE-2026-57789. The attack can be initiated remotely. There is not any exploit available.

A vulnerability described as critical has been identified in Edge-mes Aalto Plugin up to 1.8 on WordPress. Affected is an unknown function of the component Include/Require Statement. The manipulation of the argument filename results in file inclusion. This vulnerability is known as CVE-2026-57788. It is possible to launch the attack remotely. No exploit is available.