cyberintel.kalymoon.com · 43978 articles · updated every 4 hours · grows forever
A vulnerability identified as critical has been detected in Dell PowerProtect Data Domain up to 8.7.0.0 . Affected by this issue is some unknown functionality. The manipulation leads to os command inj…
A vulnerability labeled as critical has been found in Nomios Poland GREENmod up to 2.8.32 . This affects an unknown part. The manipulation results in server-side request forgery. This vulnerability is…
A vulnerability marked as problematic has been reported in PAC4J up to 5.7.9/6.4.0 . This vulnerability affects the function String.hashCode . This manipulation causes cross-site request forgery. This…
A vulnerability described as critical has been identified in Craftql up to 1.3.7 . This issue affects some unknown processing of the file vendor/markhuot/craftql/src/Listeners/GetAssetsFieldSchema.php…
A vulnerability classified as critical has been found in PAC4J up to 4.5.9/5.7.9/6.4.0 . Impacted is an unknown function of the component LDAP Handler . Performing a manipulation of the argument Searc…
A vulnerability classified as problematic was found in STProcessMonitor up to 11.11.4.0 . The affected element is an unknown function of the component IOCTL Handler . Executing a manipulation can lead…
A vulnerability, which was classified as critical , has been found in JetBrains Junie . The impacted element is an unknown function of the component Project File Handler . The manipulation leads to co…
A vulnerability, which was classified as critical , was found in dnsmasq . This affects an unknown function of the component Bootstrap Protocol Reply Handler . The manipulation results in out-of-bound…
A vulnerability has been found in CodeAstro Simple Attendance Management System 1.0 and classified as critical . This impacts an unknown function of the file index.php . This manipulation of the argum…
A new cybercrime platform called ATHR is making it much easier for attackers to run large-scale phone-based phishing operations, also known as vishing. Instead of relying on malicious links or infecte…
Anthropic has launched Claude Opus 4.7, its latest flagship model, combining improved coding and vision capabilities with automated real-time safeguards to detect and block high-risk cybersecurity req…
A Brazilian cybersecurity researcher has exposed a sophisticated, large-scale supply chain scam involving counterfeit Ledger Nano S Plus hardware wallets sold through a Chinese marketplace, devices en…
A critical vulnerability in the marimo Python notebook platform is now being actively used by attackers to deploy a blockchain-powered backdoor on developer systems. The flaw, tracked as CVE-2026-3998…
A North Korean threat actor known as Sapphire Sleet has launched a new campaign against macOS users, using a fake Zoom SDK update to trick victims into running malicious files that steal passwords, cr…
Coordinated action by FBI, Europol and others seizes infrastructure, makes arrests – and sends warning letters to known DDoS service users
AI models are making rapid gains in vulnerability research and exploit development, raising new cybersecurity risks, a Forescout study finds
The US government is preparing to authorize a version of Anthropic’s Claude Mythos model for use by major US federal agencies, amid concerns that the AI model could rapidly spot cybersecurity vulnerab…
For organizations that want to keep company data within their own systems and have more control over how AI is deployed, Mozilla is offering an alternative to externally hosted AI services with Thunde…
Liongard has announced the expansion of LiongardIQ with new capabilities spanning programmatic AI integration, conversational querying, enhanced network discovery, and deeper identity mapping, extendi…
GitLab has released GitLab 18.11, expanding agentic AI across the entire software lifecycle with security remediation, pipeline configuration, and delivery analytics. AI-generated code moves faster th…
The security researcher who earlier this month published a proof-of-concept (PoC) exploit for a zero-day privilege escalation vulnerability in Microsoft Defender is back with two more. The first, dubb…
Google claims that its security teams work around the clock using its Gemini AI models to detect and stop harmful ads. “Bad actors are using generative AI to create deceptive ads at scale, and Gemini …
CoChat is fundamentally an AI collaboration platform designed for teamwork and to bring visibility and governance into enterprise AI shadows. The post CoChat Launches AI Collaboration Platform to Comb…
The National Institute of Standards and Technology carved a new path for vulnerability remediation by changing the way it prioritizes software flaws.