Aggregator

A threat actor using the alias azazeljakel claims to have leaked the full database of DCI Group Mexico, described as an intermediary working with Mexican entities including the tax authority (SAT), social security institute (IMSS), and mortgage company Zéndere.

A vulnerability marked as problematic has been reported in Zoho ManageEngine Mail Plugin up to 1.6.1 on WordPress. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. This vulnerability is cataloged as CVE-2026-8174. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as critical has been found in Check Point Quantum Security Gateway. This affects an unknown function of the component HTTP-based Service. Such manipulation leads to heap-based buffer overflow. This vulnerability is listed as CVE-2026-48135. The attack may be performed from remote. There is no available exploit.

A vulnerability identified as problematic has been detected in Check Point Quantum Security Gateway. The impacted element is an unknown function of the component Browser-based Authentication. This manipulation causes improper control of filename for include/require statement in php program ('php remote file inclusion'). This vulnerability is tracked as CVE-2026-48133. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability categorized as critical has been discovered in Hitachi Energy MACH HiDraw up to 9.21. The affected element is an unknown function of the component XML File Handler. The manipulation results in heap-based buffer overflow. This vulnerability is identified as CVE-2026-7310. The attack is only possible with local access. There is not any exploit available. It is advisable to upgrade the affected component.

2021 年美国德州通过法案禁止孕妇在妊娠约 6 周后堕胎。2022 年美国最高法院在 Dobbs v. Jackson Women’s Health Organization 一案中裁决宪法未赋予公民堕胎权，因此推翻了 1973 年的 Roe v. Wade 案。截至 2026 年初美国有 13 个州全面禁止堕胎，7 个州禁止孕妇妊娠 22 周后堕胎。严格堕胎禁令被认为会增加妊娠相关死亡率。发表在《American Journal of Public Health》期刊上的一项研究调查了严格堕胎禁令对孕妇健康的影响。结果显示，在 14 个严格禁止堕胎和禁止妊娠 6 周后堕胎的州，妊娠相关死亡比预期高 9.2%。

A vulnerability was found in KubeVirt. It has been rated as critical. Impacted is an unknown function of the component virt-handler. The manipulation leads to link following. This vulnerability is referenced as CVE-2026-7374. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in Check Point Quantum Security Management. It has been declared as critical. This issue affects some unknown processing of the component Role-Based Access Control. Executing a manipulation can lead to sql injection. The identification of this vulnerability is CVE-2026-48136. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in Check Point Quantum Security Gateway. It has been classified as problematic. This vulnerability affects unknown code of the component VPN Processing Service. Performing a manipulation of the argument length results in out-of-bounds read. This vulnerability was named CVE-2026-48132. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in Check Point Quantum Security Gateway and classified as critical. This affects an unknown part of the component VPN Service. Such manipulation leads to heap-based buffer overflow. This vulnerability is uniquely identified as CVE-2026-48131. The attack can be launched remotely. No exploit exists.

A vulnerability has been found in Check Point Quantum Security Gateway and classified as critical. Affected by this issue is some unknown functionality of the component UserCheck Ask Page. This manipulation causes sql injection. This vulnerability is handled as CVE-2026-48134. The attack can be initiated remotely. There is not any exploit available.

A vulnerability, which was classified as problematic, was found in B&R Industrial Automation PPT30 Operating System up to 1.7.x. Affected by this vulnerability is an unknown functionality. The manipulation results in allocation of resources. This vulnerability is known as CVE-2025-11482. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

Currently trending CVE - Hype Score: 1 - Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This ...

Currently trending CVE - Hype Score: 1 - A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation (ECI) enabled, ...

Early results show a tenfold jump in bug discovery at some partners, and a widening gap between finding flaws and fixing them.

The post Anthropic: Mythos finds more than 10,000 software flaws in first month appeared first on CyberScoop.