Cisco UCS Central Flaw Enables Authenticated Remote Code Execution
Cisco’s UCS Central Software patch addresses an authenticated remote code execution and information disclosure flaw rated CVSS 7.6.
WatchGuard AuthPoint Gateway Gets Four Security Fixes
WatchGuard's AuthPoint Authentication Gateway 7.6.0 fixes four vulnerabilities, including three critical flaws affecting authentication services.
SignalPlus Security Alert Prompts Binance, Deribit API Revocations
Binance and Deribit removed SignalPlus-linked API keys after the trading platform reported a potential security issue; neither exchange reported a compromise.
Arkéa Cyberattack Involves About €100M, Recovery Unclear
Crédit Mutuel Arkéa says its cyberattack involved about €100 million in fraudulent transfers, but the bank has not confirmed a final loss or recovery amount.
Chainalysis Breach Exposes Password Hashes and Live Tokens
Chainalysis says a new phase of its October breach exposed password hashes and live tokens for every user, prompting broader service shutdowns and password resets.
Kyiv Independent Website Back Online After Cyberattack Hijacks Newsletter
The Kyiv Independent has restored access to its website following a suspected Russian cyberattack that compromised its content management system and newsletter service, allowing attackers to distribute fabricated news reports to subscribers.
Discord Is Rebuilding Its App in Rust to Use Less Memory
Discord is working on a major redesign of its desktop and mobile apps, moving away from Electron and React Native in favor of a Rust-based architecture.
Android GhostMap Flaw Can Trigger Persistent Boot Loops
Bitdefender researchers say a malformed APK can crash Android system services in a loop, leaving affected phones unusable until a factory reset.
NIKKE PC Launcher Breach Adds Malware Scan Tool
Level Infinite added malware detection and removal to NIKKE’s Windows PC client after attackers tampered with launcher scripts and distributed malware.
OpenAI Pipeline Finds 948 Linux Privilege-Escalation Flaws
OpenAI says its AI research pipeline found 948 distinct Linux privilege-escalation flaws and generated candidate patches in a $1.21 million run.
CZ Warns of Fake Trust Wallet Website in Phishing Scam
Binance co-founder Changpeng Zhao has warned cryptocurrency users about a phishing website impersonating Trust Wallet to steal funds.
cPGuard Breach Exposed 7,900 Customer Records
OPSShield says attackers copied 7,900 billing records and ran a malicious cPGuard update as root on about 2,950 customer servers.
Vercel Adds Device-Bound Sessions to Stop Cookie Replay
Vercel is gradually rolling out device-bound session credentials for vercel.com logins, making stolen cookies harder to reuse from another device.
Loading
