IBM Aspera Faspex Flaw Added to CISA KEV After Exploitation
CISA has added a critical authorization flaw in IBM Aspera Faspex to its Known Exploited Vulnerabilities catalog after confirming exploitation.
NEAR AI Breach Exposes Data From 100 Users and 18 Agents
NEAR AI says an attacker used an SGLang remote-code-execution flaw to access account details for about 100 users and data from 18 legacy agents.
Apple Fixes AirPlay and Messages Security Flaws
Apple's November 9 security updates fix AirPlay, Bluetooth and Messages flaws across iPhone, iPad, Mac and Apple Watch software, including bugs affecting wireless pairing and iMessage group chats.
SAP Fixes Four Critical Flaws Rated CVSS 10.0
SAP’s November 10 security update includes 35 new security notes, four GitHub advisories and four critical vulnerabilities rated CVSS 10.0.
Anthropic Unveils Mythos 5.2 With Stronger Cyber Skills
Claude Mythos 5.2 improves vulnerability discovery, but access is limited to verified teams and Enterprise customers using Claude Security.
LNbits Orders All Servers Offline After Attacks
LNbits has ordered every operator to shut down its servers after attacks drained funds from one reported instance, with security fixes still pending.
Mitsui Chemicals to Buy JSR in $11.6 Billion Chip Deal
Mitsui Chemicals has agreed to acquire JSR for 1.84 trillion yen, bringing a major photoresist supplier under its control in a deal awaiting regulatory approval.
Turla Uses Cereal Malware to Spy on Government Emails
ESET says Turla used its Cereal toolset on Microsoft Exchange servers at government agencies in Kazakhstan and Romania, including to collect NATO and EU emails.
France Blames Iran for 700-Site Supermarket Cyberattack
France says Iran’s Shahid Kaveh unit sabotaged refrigeration controls at about 700 retail sites in October, causing food losses and at least 15 fires.
Qubole AWS Access Abused to Steal Customer Data
Wiz says attackers used credentials associated with Qubole's AWS account to assume customer roles, harvest secrets and copy data from S3 buckets.
Gemini Adds Memory Summary With Edit and Delete Controls
Google's Gemini Memory summary gives eligible users a way to inspect, correct and delete personal details retained from their conversations.
Barracuda Confirms Attacks on Patched ESG Flaws
Barracuda says attackers exploited its patched Email Security Gateway flaws, which can be chained to gain root access when the management interface is reachable.
Fireworks AI Breach Exposes Billing Data and Model Assets
Fireworks AI says an October intrusion via a third-party cloud provider exposed account and billing details, with secrets, datasets and incomplete model weights accessed for a limited set of accounts.
Loading
