cyberintel.kalymoon.com · 46563 articles · updated every 4 hours · grows forever
A vulnerability described as critical has been identified in Canonical LXD up to 5.0.6/5.21.4/6.7.x . This impacts the function isVMLowLevelOptionForbidden of the file lxd/project/limits/permissions.g…
A vulnerability classified as critical has been found in Canonical LXD up to 5.0.6/5.21.4/6.7.x . Affected is an unknown function of the file backup/index.yaml of the component Backup Import . This ma…
A vulnerability classified as critical was found in Canonical LXD up to 5.0.6/5.21.4/6.7.x . Affected by this vulnerability is the function doCertificateUpdate of the file lxd/certificates.go of the c…
A vulnerability, which was classified as critical , has been found in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE 1.8.1 . Affected by this issue is some unknown functionality of the component Fact…
A vulnerability, which was classified as problematic , was found in code-projects Patient Record Management System 1.0 . This affects an unknown part of the file /db/hcpms.sql of the component SQL Dat…
A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0 and classified as critical . This vulnerability affects unknown code of the file /topic-details.php . The manipulation of…
A vulnerability was found in Tenda CH22 1.0.0.6(468) and classified as critical . This issue affects the function R7WebsSecurityHandlerfunction of the component httpd . The manipulation results in pat…
Hackers are claiming that one of China’s most strategically important computing facilities suffered a massive cyber intrusion, with more than 10 petabytes of sensitive information allegedly taken from…
A newly identified phishing campaign is using Google Cloud Storage to deliver Remcos RAT — a powerful remote access trojan — to unsuspecting victims across the globe. Attackers are abusing the trust t…
Palo Alto Networks released an urgent update to patch a high-severity flaw (CVE-2026-0234) affecting the Microsoft Teams integration in Cortex XSOAR and Cortex XSIAM. This flaw could allow unauthorize…
SonicWall has released a critical security advisory addressing four vulnerabilities affecting its Secure Mobile Access (SMA) 1000 series appliances. These security flaws could allow remote attackers t…
GitLab has released urgent security updates (versions 18.10.3, 18.9.5, and 18.8.9) for its Community Edition (CE) and Enterprise Edition (EE) to address high-severity flaws that enable Denial-of-Servi…
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical security flaw in Ivanti Endpoint Manager Mobile (EPMM). The agency recently added this fla…
Open source developers are facing a growing and sophisticated threat — one that does not rely on complex exploits or hidden vulnerabilities but instead uses something far simpler: trust. A social engi…
Google’s threat intel team warns UNC6783, a new extortion group possibly linked to the “Raccoon” persona, is targeting BPOs and enterprises
SANS Institute reveals that AI agents are behind a 76% surge in non-human identities
A spear-phishing campaign which spread across the Middle East between 2023 and 2024 has now been linked to Bitter APT group
macOS 26.4 update introduced security warnings into Terminal to prevent ClickFix attacks, so attackers have shifted to Script Editor instead
The gap between vulnerability disclosure and exploitation is drastically decreasing, putting security teams’ patching practices on notice. According to Rapid7’s latest Cyber Threat Landscape Report , …
ClickFix malware campaigns are evolving again, with threat actors removing one of their most obvious and user‑dependent steps: convincing victims to paste malicious commands into Terminal. Instead, th…
Before I ever held a security title, I was a software engineer implementing vertically integrated automation systems for industrial manufacturing, warehouse-scale conveyor networks, robotic material h…
Meta Superintelligence Labs has introduced Muse Spark, a natively multimodal reasoning model with support for tool use, visual chain of thought, and multi-agent orchestration. The release includes a C…
After years of waiting, WhatsApp is set to roll out a username feature that will allow people to connect and communicate without sharing their phone numbers. This means more privacy and better control…
Advenica announced the File Scanner Kiosk, a system that scans USB media for malware and helps businesses reduce infection risk. With the reliance on external media for file transfers, organisations f…