cyberintel.kalymoon.com · 33905 articles · updated every 4 hours · grows forever
A vulnerability, which was classified as problematic , was found in envoyproxy envoy up to 1.35.12/1.36.8/1.37.4/1.38.2 . This issue affects some unknown processing of the component PATCH Request Hand…
A vulnerability has been found in envoyproxy envoy up to 1.35.10/1.36.6/1.37.2/1.38.0 and classified as problematic . Impacted is the function c_str of the component Helper Utility . This manipulation…
A vulnerability was found in envoyproxy envoy up to 1.35.10/1.36.6/1.37.2/1.38.0 and classified as problematic . The affected element is an unknown function of the component JSON Object Handler . Such…
A vulnerability was found in envoyproxy envoy up to 1.35.10/1.36.6/1.37.2/1.38.0 . It has been classified as problematic . The impacted element is an unknown function. Performing a manipulation result…
A vulnerability was found in envoyproxy envoy up to 1.35.10/1.36.6/1.37.2/1.38.0 . It has been declared as problematic . This affects an unknown function. Executing a manipulation can lead to http req…
A vulnerability was found in Devolutions Remote Desktop Manager up to 2026.2.10 . It has been rated as critical . This impacts an unknown function of the component Powershell Script Handler . The mani…
A vulnerability categorized as problematic has been discovered in envoyproxy envoy up to 1.37.4/1.38.2 . Affected is an unknown function of the component Host Header Handler . The manipulation results…
A vulnerability identified as problematic has been detected in envoyproxy envoy up to 1.35.10/1.36.6/1.37.2/1.38.0 . Affected by this vulnerability is an unknown functionality. This manipulation cause…
A vulnerability labeled as critical has been found in envoyproxy envoy up to 1.36.8/1.37.4/1.38.2 . Affected by this issue is the function ConnectionManagerImpl::doDeferredStreamDestroy of the compone…
A vulnerability marked as problematic has been reported in nrwl nx up to 22.7.1/23.0.0-beta.1 . This affects an unknown part of the component HELP Command Handler . Performing a manipulation results i…
How Should the British Government Respond to the $2.5B Economic Disruption? Suggestions that the Kremlin orchestrated the disruptive hack attack against British automotive giant Jaguar Land Rover rais…
Also: AI Model for Drug Development Allegedly Stolen; Accenture's Dragos Deal In this week's panel, four ISMG editors discussed Western intelligence agencies' warning that attackers will soon wield fr…
Forrester: Transaction Reflects Move From Services Toward Owning Security Technology Forrester analyst Paddy Harrington says Accenture's proposed acquisition of Dragos signals a strategic move toward …
Coordinated 'OneHHS' AI Governance, Implementation, Guidance Efforts Under Way The U.S. Department of Health and Human Services is preparing guidance aimed at accelerating the adoption of healthcare A…
A newly disclosed Linux kernel vulnerability combining a Copy-on-Write (COW) page-cache corruption flaw with the net/sched subsystem’s act_pedit component is enabling unprivileged local attackers to e…
A high-severity vulnerability in the Amazon Q Developer Extension for Visual Studio Code (VS Code), Amazon’s AI-powered coding assistant. Tracked as CVE-2026-12957 and CVE-2026-12958 and disclosed by …
A new Linux kernel local privilege escalation vulnerability, dubbed “DirtyClone” (CVE-2026-43503), that allows unprivileged local users to gain full root access by manipulating cloned network packets …
Enterprises that have turned to AI in order to boost their security defenses may have to reconsider their approach. Malware containing code that commands LLM-assisted products to abort their analysis …
A Chinese-speaking advanced persistent threat (APT) actor has been linked to a new custom backdoor called TinyRCT as part of cyber attacks aimed at government entities and critical infrastructure in S…
A newly discovered cyber attack campaign has been observed delivering a previously undocumented malware family called SharkLoader that acts as a loader for deploying Cobalt Strike Beacon on compromise…
The FBI and CISA have updated their March warning about Russian intelligence phishing Signal accounts, and the operators have added a step: they now coax targets into handing over their Signal Backup …
Threat actors are creating OpenAI tenants that impersonate legitimate companies and inviting employees to join them, in what appears to be a ploy to trick targets into submitting sensitive company inf…
Polymarket says it will fully reimburse customers who lost an estimated $3 million after hackers injected a malicious script into the platform's frontend following a breach at a third-party vendor. [.…