cyberintel.kalymoon.com · 53379 articles · updated every 4 hours · grows forever
A vulnerability classified as critical has been found in QNAP QuNetSwitch 2.0.4.0415 . Affected by this vulnerability is an unknown functionality. This manipulation causes os command injection. The id…
A vulnerability classified as critical was found in QNAP QuRouter up to 2.5.1.060 . Affected by this issue is some unknown functionality of the component Endpoint . Such manipulation leads to improper…
A vulnerability, which was classified as critical , has been found in QNAP QuRouter up to 2.5.1.060 . This affects an unknown part. Performing a manipulation results in weak authentication. This vulne…
A vulnerability, which was classified as critical , was found in QNAP Systems QuRouter 2.4.5.032/2.4.6.028 . This vulnerability affects unknown code. Executing a manipulation can lead to improper neut…
A vulnerability has been found in QNAP Systems QuRouter 2.4.5.032/2.4.6.028 and classified as critical . This issue affects some unknown processing. The manipulation leads to sql injection. This vulne…
A vulnerability was found in QNAP QuFTP Service up to 1.4.2/1.5.1/1.6.1 and classified as problematic . Impacted is an unknown function. The manipulation results in cross site scripting. This vulnerab…
A vulnerability was found in TP-Link AX53 . It has been classified as critical . The affected element is an unknown function. This manipulation causes stack-based buffer overflow. This vulnerability i…
A vulnerability was found in QNAP QuNetSwitch 2.0.4.0415 . It has been declared as critical . The impacted element is an unknown function. Such manipulation leads to os command injection. This vulnera…
A vulnerability was found in DooTask 1.6.27 . It has been rated as problematic . This affects an unknown function of the file /manage/project/ . Performing a manipulation of the argument projectDesc r…
A vulnerability categorized as critical has been discovered in TP-Link AX53 . This impacts an unknown function. Executing a manipulation can lead to command injection. This vulnerability appears as CV…
In this agentic era, security must be woven into, and around, every layer of the AI estate. At RSAC 2026, we are delivering on that vision with new purpose-built capabilities designed to help organiza…
Excerpt: CTI-REALM is Microsoft’s open-source benchmark for evaluating AI agents on real-world detection engineering—turning cyber threat intelligence (CTI) into validated detections. The post CTI-REA…
Federal Proposal Pushes AI Adoption While Avoiding Regulatory Detail The White House AI framework urges rapid deployment and federal alignment to counter China while proposing guardrails on fraud, saf…
No Arrests, But Virtual Servers, IP Addresses Seized and Residencies Searched U.S. authorities seized KimWolf - the attack infrastructure responsible for the largest distributed denial of service atta…
Contec and Epsimed Monitors Containing 'Backdoors' Are at the Center of Order Texas Gov. Abbott has ordered agencies to review foreign-made connected medical devices - especially those from Chinese ma…
Anthropic is expanding Claude Cowork Desktop with a new Projects feature designed to keep files, instructions, and task context organized inside a single workspace. For paid users, the update makes it…
Google will no longer accept AI-generated submissions to a program it funded to find bugs in open-source software. However, it is contributing to a separate program that uses AI to strengthen security…
Water utilities are finding that letting information flow can flush out cybersecurity problems. The water industry has a security issue: Many utilities operate with ageing systems and minimal IT or cy…
Files on a central cloud server used by the ransomware group highlight a systematic, aggressive attack on network backups as a key TTP.
Attackers can execute arbitrary code without authentication if Oracle's Identity or Web Services Managers are exposed to the Web.
A critical security flaw impacting Langflow has come under active exploitation within 20 hours of public disclosure, highlighting the speed at which threat actors weaponize newly published vulnerabili…
Trivy, a popular open-source vulnerability scanner maintained by Aqua Security, was compromised a second time within the span of a month to deliver malware that stole sensitive CI/CD secrets. The late…
An international law enforcement action called Operation Alice has shut down over 373,000 dark web sites that offered fake CSAM packages. [...]