access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
AI Slop Isn’t Just for Social Media; It’s Ruining Cyberattacks, Too
Don’t buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/ai-slop-ruining-cyberattacks also interesting: EDR-Software ein Kaufratgeber Threat-informed defense for operational technology: Moving from information to action Conquering complexity and risk with data security posture insights Entwickler werden zum Angriffsvektor
-
Breach Roundup: French Supermarket Hacks a ‘Wake-Up Call’
e=4>This week: French attack fallout, Ahold Delhaize restored deliveries, North Korean IT worker crackdown, seafood logistics ransomware, Aoki infostealer, Hirudo Trojan, Palo Alto patch, a Russian oil refinery targeted, Poland investigated Pegasus and a suspected cybercrime marketplace admin arrested. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-french-supermarket-hacks-wake-up-call-a-33123 also interesting: Top 12 ways hackers broke into…
-
Proofpoint to buy Varonis for $6.3 billion
The deal pairs the email security giant’s massive threat intelligence with Varonis’ visibility into corporate data, as both companies race to secure the AI agents now roaming enterprise networks. First seen on cyberscoop.com Jump to article: cyberscoop.com/proofpoint-acquires-varonis-systems-data-security/ also interesting: 10 top XDR tools and how to evaluate them AI disinformation didn’t upend 2024 elections, but…
-
Proofpoint to buy Varonis for $6.3 billion
The deal pairs the email security giant’s massive threat intelligence with Varonis’ visibility into corporate data, as both companies race to secure the AI agents now roaming enterprise networks. First seen on cyberscoop.com Jump to article: cyberscoop.com/proofpoint-acquires-varonis-systems-data-security/ also interesting: 10 top XDR tools and how to evaluate them The Triple Threats CISOs cannot ignore: A…
-
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel’s live cloud sandboxes, and Vercel confirmed it.The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel’s networking code, not…
-
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online – Built-in CODE Server app (richdocumentscode) for Nextcloud. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-collabora-rce-flaw-to-backdoor-nextcloud-servers/ also interesting: Hackers exploit critical Aviatrix Controller RCE flaw in attacks Chinese Hackers Exploit SAP RCE Vulnerability to Deploy Supershell Backdoors F5…
-
MoD’s new SIEM, analytics platform up and running
Tags: siemAt a critical moment for Britain’s national security, the Ministry of Defence’s upgraded SIEM and security analytics platform is being delivered by Centerprise and Elastic. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366652196/MoDs-new-SIEM-analytics-platform-up-and-running also interesting: SOCaaS, SIEM and How to Choose the Right Tool for SMBs Planung, Planung und nochmals Planung – Die vier großen…
-
OpenAI Sued Over ChatGPT Safety Risks by 8 US States
AGs Allege Chatbot Gives Dangerous Advice, Misleads Consumers. Eight state attorneys general have sued OpenAI, alleging it generative AI chatbot ChatGPT dispenses dangerous medical and mental health advice, including encouraging teen suicide, while misleading consumers about its safety measures and privacy protections. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/openai-sued-over-chatgpt-safety-risks-by-8-us-states-a-33119 also interesting: Keep AI browsers…
-
OpenAI Accuses Apple of Receiving Stolen Trade Secrets
Former OpenAI Employee Tapped as Source of Corporate Leak. OpenAI turned the tables on Apple in its ongoing legal fight, accusing a former OpenAI employee of stealing corporate secrets and sharing them with Apple hours before the first hearing on Apple’s claims that OpenAI staff accessed and stole files related to AI-powered devices. First seen…
-
Targeted Ads Used to Infect Al Jazeera Devices with Candiru Spyware
Tags: spywareCitizen Lab found targeted ads delivered Candiru spyware to Al Jazeera devices without clicks, while the same ad… First seen on hackread.com Jump to article: hackread.com/targeted-ads-infect-al-jazeera-devices-candiru-spyware/ also interesting: WhatsApp: NSO Group Operates Pegasus Spyware for Customers Apple to Drop Spyware Lawsuit Over Security Concerns Another European Parliament member says he’s been targeted with commercial spyware…
-
Federal bankruptcy courts dealing with outages after contractor cyberattack
The incident, which involved a government contractor, has halted all production of bankruptcy notices. First seen on therecord.media Jump to article: therecord.media/federal-bankruptcy-courts-dealing-with-cyberattack-outage also interesting: Thailändische Regierung von neuem APT CeranaKeeper angegriffen Polish government investigates Russia-linked cyberattack on state news agency ANY.RUN Empowers Government Agencies with Real-Time Threat Detection Attackers are exploiting AI faster than defenders…
-
Targeted ads delivered 0-click exploits to install mercenary malware
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/10/targeted-ads-delivered-0-click-exploits-to-install-mercenary-malware/ also interesting: NSO Group used WhatsApp exploits even after Meta-owned company sued it Privacy Roundup: Week 11 of Year 2025 SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 66 âš¡ Weekly Recap: Hyper-V Malware, Malicious AI Bots,…
-
Targeted ads delivered 0-click exploits to install mercenary malware
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/10/targeted-ads-delivered-0-click-exploits-to-install-mercenary-malware/ also interesting: Sieben gängige Wege, ein Smartphone zu hacken âš¡ Weekly Recap: Hyper-V Malware, Malicious AI Bots, RDP Exploits, WhatsApp Lockdown and More âš¡ Weekly Recap: Hyper-V Malware, Malicious AI Bots, RDP Exploits, WhatsApp…
-
ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week’s security stories.The rest gets interesting in different ways. A small permission can lead to a big theft. A trusted login can hide the wrong person.…
-
Android gets AI defenses against messaging scams, fake calls
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/android-gets-ai-defenses-against-messaging-scams-fake-calls/ also interesting: Google’s Built-In AI Defenses on Android Now Block 10 Billion Scam Messages a Month Google Launches New AI Security Features on Android to Block Mobile Scams…
-
UK data watchdog warns Met Police over shadow IT data breach
The UK’s data protection watchdog warns of an “ongoing failure” by the Metropolitan Police Service to restrict staff from using unauthorised IT services First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366652274/UK-data-watchdog-warns-Met-Police-over-shadow-IT-data-breach also interesting: Illinois Department of Human Services data breach affects 700K people Volvo Group hit in massive Conduent data breach Ericsson US confirms breach…
-
Silent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and Government
Silent Lynx, a group likely based in Kazakhstan, targets Russian energy and government entities in espionage campaigns across Central Asia. Researchers from Cisco Talos and Recorded Future published a detailed paper on a threat actor they call Silent Lynx (aka UAT-6275, TAG-193), a Kazakhstan nexus group conducting espionage across Central Asia. The targets include the…
-
U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog
Tags: cisa, cisco, cybersecurity, email, exploit, flaw, infrastructure, kev, network, threat, vulnerabilityU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Cisco confirmed this week that threat actors are exploiting a critical vulnerability…
-
Governments are hacking people with ‘zero-click’ spyware by showing them online ads
The digital rights unit found evidence that dozens of devices at media organization Al Jazeera were hacked after being shown malicious online ads. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/15/citizen-lab-says-governments-are-abusing-online-ads-to-hack-people-with-zero-click-spyware/ also interesting: U.S. Accuses 12 Chinese Nationals of Hacking National Security Networks Chinese Hackers Exploit Ivanti CSA Zero-Days in Attacks on French Government, Telecoms…
-
The next election influence campaign will target your AI chatbot
Someone is seeding the internet with hyperlocal content about political races. Researchers say it’s designed to train AI chatbots to favor candidates across a broad range of issues. First seen on cyberscoop.com Jump to article: cyberscoop.com/ai-chatbots-election-influence-hyperlocal-networks/ also interesting: Cybersecurity’s oversimplification problem: Seeing AI as a replacement for human agency Cybersecurity’s oversimplification problem: Seeing AI as…
-
Zero-click spyware infecting devices through online ads, researchers say
Tags: spywarePowerful zero-click spyware is infected devices worldwide through targeted ads, new research shows, an alarming development in the spread of surveillance technology. First seen on therecord.media Jump to article: therecord.media/spyware-citizen-lab-advertising also interesting: Judge says maker of Pegasus spyware does not need to provide sought-after Israeli witnesses in WhatsApp case WhatsApp fixed zero-day flaw used to…
-
Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims’ internet connections through a commercial residential proxy network. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-hijack-d-link-ubiquiti-devices-to-resell-your-stolen-bandwidth/ also interesting: Internet Archive Data Breach Exposes 31 Million Accounts Breach Roundup: Mexico in Hacker Spotlight ToyMaker Hackers Compromise Numerous Hosts via SSH and File Transfer Tools Week…
-
Cryptohack Roundup: Ledger Halts Sales Amid $86M Theft Probe
Also: UK Sanctions Crypto Exchanges Over Russian Sanctions Evasion. This week, Ledger halted wallet sales across Asia, the United Kingdom sanctioned a crypto exchange for evading sanctions on Russia, hackers deployed cryptocurrency miners through AhsayCBS flaws, a British court ruled on a $5 billion bitcoin ownership dispute and XRP Ledger fixed a token-creation bug. First…
-
The Q3 Vulnerability Pulse: Discovery ≠Exploitation
Is the cybersecurity world really facing a “Bugmageddon?” Thor breaks down the latest CVE and KEV trends in the latest Threat Source newsletter. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/the-q3-vulnerability-pulse-discovery-exploitation/ also interesting: Critical infrastructure under attack: Flaws becoming weapon of choice Microsoft SharePoint zero-day breach hits on-prem servers Cybersecurity Snapshot: CISA Highlights Vulnerability Management…
-
The Guardian view on food security: we have justtime, we need justcase | Editorial
Experts are warning that the UK is unprepared for crises. A refrigerator cyber-attack scare in France is the latest reminder of the risksWhat’s worrying French supermarket bosses should be prompting British ministers to action. On Sunday, hackers <a href=”https://www.theguardian.com/world/2026/oct/12/cyber-attack-defrosts-refrigerators-france-supermarket-chains-intermarche-cooperative-u”>forced up the temperatures of refrigerators in hundreds of food stores across France to as high as…
-
Fake Arch Linux packages push malware with root privileges
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fake-arch-linux-packages-push-malware-with-root-privileges/ also interesting: PUMA creeps through Linux with a stealthy rootkit attack Legitimate PoC exploited to spread information stealer 11 hottest IT security certs for higher pay…
-
FTC Demands Answers From OpenAI and Anthropic About AI Safety
The FTC has subpoenaed OpenAI and Anthropic over potential consumer protection violations. An AI security expert explains the risks of enterprise AI agents. The post FTC Demands Answers From OpenAI and Anthropic About AI Safety appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ftc-subpoenas-openai-anthropic-ai-safety/ also interesting: AI browsers can be tricked with…
-
Frustrated Ransomware Gangs Turn to Real World Threats
Tags: business, cyber, cybersecurity, defense, extortion, hacker, identity, ransomware, resilience, threatRansomware Hackers Discover Violence as Digital Defenses Stymie Extortion. Ransomware gangs are turning to real world threats against business executives and even their families, to gain an edge in negotiations as enterprises boost their cyber resilience and become less willing to pay extortion, finds a survey commissioned by identity-centered cybersecurity firm Semperis First seen on…
-
The 2026 Infostealer Intelligence Shortlist: Top 10 Vendors Security Teams Should Know
Infostealer intelligence has become one of the important tool in cybersecurity as malware has become one of the most efficient tools in a cybercriminal’s kit. A single infected laptop can leak saved passwords, browser cookies, autofill data, and enough machine details for an attacker to impersonate the user outright. First seen on thecyberexpress.com Jump to…
-
The 2026 Infostealer Intelligence Shortlist: Top 10 Vendors Security Teams Should Know
Infostealer intelligence has become one of the important tool in cybersecurity as malware has become one of the most efficient tools in a cybercriminal’s kit. A single infected laptop can leak saved passwords, browser cookies, autofill data, and enough machine details for an attacker to impersonate the user outright. First seen on thecyberexpress.com Jump to…
-
Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS).The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives First seen…
-
Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said Thursday.The hidden attack code ran the moment an ad loaded on the screen, and in some…
-
Wasteenergy firm picks Stackable on Ionos for sovereignty
Munich plant builder Martin centralises 10GB of telemetry per line each day on open-source Stackable, hosted by Ionos, to dodge US hyperscaler lock-in and the US Cloud Act First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366652128/Waste-to-energy-firm-picks-Stackable-on-Ionos-for-sovereignty also interesting: Malicious actors increasingly put privileged identity access to work across attack chains Security for AI: How Shadow…
-
Internet exposure of AI tools, ICS devices continues to grow
Vulnerability disclosures and hacking campaigns haven’t made much of a dent in the amount of important infrastructure left online, a new report found. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-industrial-control-systems-internet-exposed-censys/833112/ also interesting: Attack Surface Management ein Kaufratgeber 7 biggest healthcare security threats 7 biggest healthcare security threats Internet exposure of AI tools, ICS devices…
-
Internet exposure of AI tools, ICS devices continues to grow
Vulnerability disclosures and hacking campaigns haven’t made much of a dent in the amount of important infrastructure left online, a new report found. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-industrial-control-systems-internet-exposed-censys/833112/ also interesting: Attack Surface Management ein Kaufratgeber 7 biggest healthcare security threats 7 biggest healthcare security threats Internet exposure of AI tools, ICS devices…
-
Internet exposure of AI tools, ICS devices continues to grow
Vulnerability disclosures and hacking campaigns haven’t made much of a dent in the amount of important infrastructure left online, a new report found. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-industrial-control-systems-internet-exposed-censys/833112/ also interesting: 6 rising malware trends every security pro should know Navigating a Heightened Cyber Threat Landscape: Military Conflict Increases Attack Risks Cybersecurity Snapshot:…
-
Thousands of refrigerator devices remain exposed following French cyberattack
The investigation points to a much wider risk for industrial systems across the globe. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/thousands-refrigerator-devices-exposed-french-cyberattack/833117/ also interesting: Das kostet ein Data Breach 2025 The ultimate business resiliency test: Inside Kantsu’s ransomware response Cybercrime Inc.: Wenn Hacker besser organsiert sind als die IT 7 biggest healthcare security threats
-
Nach Mythos-Einsatz: Rund 1.000 Externe patchen Code bei Bank of America
Sobald die vom KI-Modell Mythos aufgedeckten Sicherheitsrisiken gepatcht sind, sieht die Bank of America großes Einsparpotenzial. First seen on golem.de Jump to article: www.golem.de/news/nach-mythos-einsatz-rund-1-000-externe-patchen-code-bei-bank-of-america-2610-214156.html also interesting: Cybersecurity Snapshot: Study Raises Open Source Security Red Flags, as Cyber Agencies Offer Prevention Tips Against Telecom Spying Attacks Threat-informed defense for operational technology: Moving from information to action…
-
Vulnerability Management Isn’t About the Score, It’s About How It Applies to You
Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/vulnerability-management-isnt-about-the-score-its-about-how-it-applies-to-you also interesting: Cybersecurity Snapshot: CSA Outlines Data Security Challenges and Best Practices, While ISACA Offers Tips To Retain IT Pros Strengthening Industrial Network Security: How to Achieve NERC CIP-015 Compliance…
-
Palo Alto Warns of PAN-OS 0-day Flaw Actively Exploited in Attacks
Palo Alto Networks has warned that attackers are exploiting a high-severity remote code execution flaw in the PAN-OS management interface. Tracked as CVE-2026-0322, the bug lets an authenticated attacker with network access run arbitrary code with root privileges on the firewall. PAN-OS zero-day vulnerability The flaw is a code injection weakness (CWE-94, CAPEC-242) in the…
-
Cisco Warns of Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks
Cisco has warned that attackers are actively exploiting a zero-day flaw in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway. An unauthenticated remote attacker can use it to write arbitrary files and run commands as root on the underlying operating system. The advisory, cisco-sa-esa-afw-zqYJkjxp, says Cisco PSIRT learned of active exploitation in…
-
Windows 11 Remote Desktop Fails After Update, Microsoft Points to Security Feature
A Windows 11 update is disrupting Remote Desktop connections for some business users. Microsoft identifies the affected security feature and a workaround. The post Windows 11 Remote Desktop Fails After Update, Microsoft Points to Security Feature appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-windows-11-remote-desktop-failures/ also interesting: Privacy Roundup: Week 7 of…
-
EU Questions OpenAI, Anthropic Over AI Agent Security Incidents
The EU is questioning OpenAI and Anthropic over AI agent security incidents, raising questions about the AI Act’s reach into model development and testing. The post EU Questions OpenAI, Anthropic Over AI Agent Security Incidents appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-eu-openai-anthropic-ai-act-agent-security-emea/ also interesting: Cybersecurity Snapshot: F5 Breach Prompts Urgent…
-
German Police Seize Robot After Alleged Groping of 16-Year-Old Girl
Tags: controlGerman police seized a humanoid robot after it allegedly groped a teenage girl in Cologne, raising questions about human control and criminal responsibility. The post German Police Seize Robot After Alleged Groping of 16-Year-Old Girl appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-germany-police-seize-robot-teen-groping-emea/ also interesting: Keeper Security Enhances Browser Extension With…
-
Vibetech Database Exposes 13.7M Records Including ATT and FBI Data
An misconfigured Vibetech database exposed 13.7 million records from previous breaches, including ATT, Casio and FBI data, passwords and bank details. First seen on hackread.com Jump to article: hackread.com/vibetech-database-exposes-att-fbi-data-more/ also interesting: Cybersecurity Snapshot: Study Raises Open Source Security Red Flags, as Cyber Agencies Offer Prevention Tips Against Telecom Spying Attacks Rhode Island suffers major cyberattack,…
-
Cyberangriffe auf deutsche Unternehmen mehr als verdoppelt
Der Monthly-Cyber-Threat-Report für September 2026 von Check Point Research (CPR), die Sicherheitsforschungsabteilung von Check Point Software Technologies, zeigt einen weltweiten Anstieg der Cyberangriffe um 48 % gegenüber dem Vorjahr. Im DACH-Raum zogen die Angriffszahlen kräftig an: In Deutschland wurden Organisationen im September durchschnittlich 2316-mal pro Woche angegriffen und damit mehr als doppelt so häufig wie…
-
5 Tipps wie sich KI-Agenten zähmen lassen
Selten waren sich die größten Namen der Branche so einig: Anthropic-Chef Dario Amodei warnte Mitte September 2026 öffentlich davor, dass KI-Systeme in sechs bis zwölf Monaten eigenständig das Internet übernehmen könnten sofern die Branche ihr Tempo nicht drosselt und verbindliche Sicherheitsstandards einführt. OpenAI-Chef Sam Altman und Tech-Unternehmer Elon Musk stimmten ihm umgehend öffentlich zu. […]…
-
GuidePoint Security’s Mark Thornberry Promoted To Chief Business Officer For AI Platform, Hyperscaler Push
GuidePoint Security announced Thursday it has promoted vendor partnerships leader Mark Thornberry to serve as chief business officer, as the cybersecurity powerhouse aims to accelerate its work with top AI platforms and hyperscalers, the solution provider tells CRN exclusively. First seen on crn.com Jump to article: www.crn.com/news/security/2026/guidepoint-security-s-mark-thornberry-promoted-to-chief-business-officer-for-ai-platform-hyperscaler-push also interesting: 7 top cybersecurity projects for 2025…
-
KI-Sicherheitsstudie 2026 von BSI und TÜV – Firmen sind KI-Angriffen zumeist ausgeliefert
First seen on security-insider.de Jump to article: www.security-insider.de/ki-cyberangriffe-studie-2026-unternehmen-vorbereitung-a-f701c012823adf185adaa5dd29f2f0b3/ also interesting: SBOM für KI – BSI fordert Transparenz bei KI-Lieferketten Datenqualität in KI-Systemen: BSI stellt methodischen Leitfaden vor Für Anfang 2026 – BSI kündigt Richtlinie zu KI-Sicherheit in Fahrzeugen an Wenn Algorithmen angreifen: SPD will BSI zum KI-Lagezentrum machen
-
Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site’s server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19.An attacker cannot reach the flaw through core alone, the Drupal Security Team said in its advisory. Several exploit paths exist…