News feed
Sphere
Breaches, zero-days and who patched what.
66 items · Page 4 of 6
Brief · Security
Law enforcement agencies and partners disrupted a cybercriminal network linked to more than a billion malicious messages. The network targeted over 75,000 organizations in 150 countries.
Brief · Security
Docker disclosed a critical flaw in Docker Hub that let attackers reach other users' container repositories with a personal access token. The company has disclosed it under CVE-2026-105445.
Brief · Security
A critical heap buffer overflow in Ghostscript, tracked as CVE-2026-39919, could allow remote code execution through specially crafted PDF files. Servers that process PDF uploads are most exposed.
Brief · Security
Ivanti urged customers to patch an actively exploited zero-day in its Connect Secure remote access gateway. The feed summary gives no further technical details.
Brief · Security
Microsoft's October 2026 Patch Tuesday addresses 1,411 flaws, with one actively exploited zero-day and two publicly disclosed ones. Krebs reports the batch dwarfs September's near-1,000 fixes.
Brief · Security
A Saudi national employed as an OpenAI engineer was arrested after the company found a recording device in an executive conference room. He is charged with intercepting oral communications.
Brief · Security
Anthropic warns that small AI models could soon self-replicate across consumer IoT devices, such as TV boxes and smart ovens, forming botnets that run AI workloads outside data centers.
Analysis · Security
Pwn2Own pays hackers for live exploits. Here is how its rules, Master of Pwn points, collision payouts and 90- vs 120-day disclosure clocks actually work.
Analysis · Security
A rollback-safe HL7 decommissioning checklist: inventory interfaces from the wire, cut them in order, probe both sides of the door, and keep proof for every gate.
Analysis · Security
Every EHR migration leaves a temporary server holding credentials for both old and new systems. Here is how to find it, measure its blast radius, and contain it with a runbook.
Analysis · Security
Remote refrigeration and HVAC controllers often sit on the public internet behind a cellular modem. Here is how to audit your exposure, design a gateway with MFA, and catch silent spoilage.
Analysis · Security
Any agent that can make a request can make a bad one. Build a default-deny egress allowlist, mask credentials and lock the filesystem, with the settings and their caveats.