cyberintel.kalymoon.com · 39055 articles · updated every 4 hours · grows forever
A vulnerability, which was classified as problematic , has been found in langgenius dify up to 1.14.1 . This vulnerability affects unknown code of the component Trace Configuration Endpoint . This man…
A vulnerability, which was classified as problematic , was found in langgenius dify up to 1.14.1 . This issue affects some unknown processing of the component Plugin Daemon REST API . Such manipulatio…
A vulnerability has been found in tinyMQTT 6226ade15bd4f97be2d196352e64dd10937c1962 and classified as problematic . Impacted is an unknown function. Performing a manipulation results in denial of serv…
A vulnerability was found in Apple Private Cloud Compute Server Software and classified as problematic . The affected element is an unknown function. Executing a manipulation can lead to information d…
A vulnerability was found in Intelbras VIP-1230-D-G4 2.800.00IB00C.0.T . It has been classified as problematic . The impacted element is an unknown function of the file /OutsideCmd of the component Pa…
A vulnerability was found in ngrok 4.3.3/5.0.0-beta.2 . It has been declared as critical . This affects an unknown function. The manipulation results in command injection. This vulnerability is report…
For the latest discoveries in cyber research for the week of 18th May, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Vodafone, a major international telecom, has sustained…
A fresh set of critical vulnerabilities in the popular workflow automation platform n8n is raising serious security concerns, as researchers warn that attackers could chain multiple flaws to achieve f…
New for 2026, the Infosecurity Europe Startup competition will see five finalists pitch their ideas in front of a live audience, including senior industry leaders, investors and buyers
Over 200 people were arrested in an anti-cybercrime operation that spanned 13 countries across the Middle East and North Africa
An old elevation-of-privilege (EoV) vulnerability affecting the Cloud Filter driver “cldflt.sys” in Windows has come back to haunt Microsoft, as researchers claim it is still exploitable six years aft…
Security researchers have developed a new image-based prompt injection attack that can manipulate how multimodal AI systems interpret user instructions without modifying the original text prompt, pote…
SmartBear has announced ReadyAPI’s new AI test generation capability that accelerates API testing by up to 80% while giving teams control to enable or disable AI. While competitors focus on speed alon…
A critical NGINX vulnerability (CVE-2026-42945) disclosed last week is being exploited by attackers, VulnCheck security researcher Patrick Garrity revealed on Saturday. The vulnerability, dubbed NGINX…
Four vulnerabilities in OpenClaw can be chained together to steal credentials, escape the sandbox, and plant persistent backdoors. The post ‘Claw Chain’ OpenClaw Flaws Allow Sandbox Escape, Backdoor D…
Several healthcare data breaches impacting hundreds of thousands and even millions were added to the HHS tracker. The post Millions Impacted Across Several US Healthcare Data Breaches appeared first o…
What happens when a phishing email looks clean enough to pass through security, but dangerous enough to expose the business after one click? That is the gap many SOCs still struggle with: the attacks …
Monday opens with a trust problem. A mail server flaw is under active use. A network control system was targeted. Trusted packages were poisoned. A fake model page pushed a stealer. Then came the fami…
Grafana Labs disclosed that hackers have downloaded its source code after breaching its GitHub environment using a stolen access token. [...]
‘Q-Day’ is almost here. It could unleash a cybersecurity crisis far worse than Y2K CNN
The 2026 Guide to Post-Quantum AI Infrastructure Security: Protecting Model Context Protocol (MCP) Security Boulevard
Inside the Foxconn Cyberattack by Nitrogen Ransomware Group Cyber Magazine
BEC Congress 2026 Held in Horsens - Corporate - Fan Zone Badminton Europe
TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack The Hacker News