cyberintel.kalymoon.com · 33905 articles · updated every 4 hours · grows forever
A group used Anthropic’s Mythos AI model to help find a kernel memory corruption vulnerability and exploit on Apple’s M5. News article .
Sergiu Gatlan reports: GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension. The company has since removed the…
Failure to terminate an employee’s credentials when their employment ended and failure to use unique and protected login credentials for work left a city at risk of having its water utility totally co…
The vibes were strong at Code with Claude, Anthropic’s two-day event for software developers in London that kicked off on May 19, the same day as Google’s I/O in Palo Alto. (A coincidence, not a flex,…
The days of rigid, vendor-locked security stacks are over. The Tenable One Open Connector amplifies Tenable One’s extensive capacity to ingest and consolidate third-party security data, giving you mor…
A highly critical SQL injection vulnerability in Drupal core's database abstraction layer affects sites running PostgreSQL. Key Takeaways CVE-2026-9082 is a highly critical SQL injection vulnerability…
A self-propagating worm has compromised more than 170 npm and PyPI packages, defeating provenance attestation and breaching OpenAI and Mistral AI. Here is what you need to know. Key takeaways Mini Sha…
The first quarter of 2026 reinforced that attackers are moving faster, operating with greater coordination, and exploiting weaknesses before most organizations can respond effectively. From escalating…
Overview This article delivers a complete, hands-on walkthrough of User Account Control (UAC) bypass techniques against a default-configured Windows 10 host. The walkthrough begins with The post Windo…
Detego Global has partnered with the National Foundation for Retired Service Animals to support the care and well-being of retired service animals who have spent their lives protecting our communities…
Paul Gullon-Scott offers a powerful, deeply personal account of how digital forensic work can cross the threshold into family life, and why investigators and their loved ones need better support.
FUXA 1.2.9 - RCE
solaredge - (CSRF-OOB-Injection)
Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path
BookStack 25.12.1 - Denial of Service
Cockpit 359 - RCE
A vulnerability labeled as critical has been found in Linux Kernel up to 6.6.139/6.12.87/6.18.29/7.0.6/7.1-rc2 . This affects the function peek . The manipulation results in null pointer dereference. …
A vulnerability marked as critical has been reported in Linux Kernel up to 6.6.139/6.12.87/6.18.29/7.0.6/7.1-rc2 . This vulnerability affects the function dlfb_ops_mmap . This manipulation causes use …
A vulnerability described as critical has been identified in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3 . This issue affects the function remove_waiter of the component rtmutex . Such manipulati…
A vulnerability classified as critical has been found in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3/7.1-rc1 . Impacted is the function ipv6_rpl_srh_rcv of the component RFC 6554 Source Routing H…
A vulnerability classified as problematic was found in Linux Kernel up to 6.6.139/6.12.87/6.18.29/7.0.6/7.1-rc2 . The affected element is the function rds_message_purge . Executing a manipulation can …
A vulnerability, which was classified as critical , has been found in Linux Kernel up to 7.1-rc3 . The impacted element is the function iov_iter_get_pages2 of the component rds . The manipulation lead…
A vulnerability, which was classified as critical , was found in Linux Kernel up to 6.6.139/6.12.87/6.18.29/7.0.6/7.1-rc2 . This affects the function t7xx_port_enum_msg_handler . The manipulation of t…
A vulnerability has been found in Apache Camel K up to 2.8.0/2.9.1/2.10.0 and classified as critical . This impacts an unknown function. This manipulation causes externally controlled reference. This …