CyberPulse Cybersecurity News, with Source Links
FA

90-day archive

All news

Search by headline, summary or source name. Every item links to its own original page.

12037 news

Page 76 of 402
CISA Advisories

Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation

The National Institute of Standards and Technology (NIST), National Security Agency’s Super Intelligence Security Center (NSA SISC) and Cybersecurity and Infrastructure Security Agency (CISA) published Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation. The product outlines ten voluntary core practices to help organizations that train and evaluate highly capable super inte…

Incident Response & Forensics
Source
CISA Advisories

Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials

CISA and the Federal Bureau of Investigation (FBI) released a Public Service Announcement (PSA) warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections. Malicious cyber actors may use phishing and smishing techniques to steal login credentials and other sensitive information or install malware on targeted devices. Election officials, candidates, and political organizations m…

Malware & Threats Phishing
Source
CISA Advisories

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability CVE-2026-102764 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the fe…

Vulnerabilities & Zero-Day Phishing Identity & Access Security
Source
CERT-Bund

[NEU] [mittel] Mattermost: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren.

Botnet & DDoS
Source
CSO Online

Linux kernel gets a fix for a flaw that enabled attackers to escape VMs

The Linux kernel’s networking stack was found vulnerable to a guest-to-host escape attack, in which an attacker operating inside a virtual machine (VM) could cross the isolation boundary and access the underlying host. Dubbed PwnEscape and tracked as CVE-2026-99999, a flaw allowed guest-controlled packet metadata to trigger a write that changes an IPv4 header after the kernel has already processed it. That flaw could…

Vulnerabilities & Zero-Day Data Breach Networking & Internet
Source
ANY.RUN

DORA TLPT Requirements Explained: Where Threat Intelligence Fits

The DORA TLPT requirements push selected EU financial entities beyond standard penetration testing. TLPT must be based on realistic threat scenarios, relevant threat actors, and current intelligence about how attacks are actually carried out. That makes threat intelligence a core part of the process. It helps define what should be tested, which TTPs matter, and […] The post DORA TLPT Requirements Explained: Where Thr…

Threat Intelligence Incident Response & Forensics Penetration Testing
Source
Help Net Security

Scammers clone candidates’ voices to steal cash and voter data ahead of 2026 midterms, FBI warns

Three weeks before Americans vote in the 2026 midterm election, fraudsters are borrowing candidate names, logos and slogans to collect fake donations and harvest personal data, the FBI warned. “The FBI warns the public that scammers could exploit the 2026 US Midterm Election to perpetrate financial fraud schemes,” reads the public service announcement, which adds that these schemes target victims throughout the count…

Source
The Hacker News

AI Decision Models and Their Impact on AI SOC Platforms

In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman's fast, intuitive thinking. OpenAI announced its own Decisions API at DevDay and opened a public beta on October 6. Cribl published cribl-decision, an open LoRA adapter you can run locally. Others, like Laya, are

Incident Response & Forensics
Source
CERT-Bund

[NEU] [hoch] Apache Camel: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Apache Camel ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.

Source
دیجیاتو

ایجنت‌های هوش مصنوعی به سیستم‌های یک شرکت هندی نفوذ کردند

یک مدل هوش مصنوعی در هند از محیط آزمایشی خارج شد و به داده‌های حساس دسترسی یافت؛ هم‌زمان، دولت درباره افزایش سرعت حملات سایبری هشدار The post ایجنت‌های هوش مصنوعی به سیستم‌های یک شرکت هندی نفوذ کردند appeared first on دیجیاتو.

AI Security AI & Machine Learning
Source
CERT-Bund

[NEU] [hoch] Sonatype Nexus Repository Manager: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Sonatype Nexus Repository Manager ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, beliebigen Programmcode auszuführen oder Administratorrechte zu erlangen, sowie um einen Cross-Site Scripting Angriff durchzuführen.

Source
Security Affairs

U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Atlassian flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Atlassian flaw, tracked as CVE-2026-21589 (CVSS score of 9.3), to its Known Exploited Vulnerabilities (KEV) catalog. In early October, threat actors started exploiting CVE-2026-21589, a critical arbitrary file access…

Vulnerabilities & Zero-Day
Source
Schneier on Security

Backdooring Open-Weight AI Models

This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models in the title because it’s the most popular reason people download modified weights without verifying what’s inside. Abliteration is a cheap fine-tune that takes away a model’s ability to refuse. You find the direction in the…

Malware & Threats Supply Chain Security
Source
شهر سخت‌افزار

بلواسکای ابزار قدرتمند Attie را معرفی کرد؛ ساخت بازی و وب ‌سایت با هوش مصنوعی و تنها یک دستور

شبکه اجتماعی Bluesky قابلیت‌های ابزار هوش مصنوعی Attie را گسترش داده است تا کاربران بتوانند بدون نیاز به دانش برنامه‌نویسی، وب‌سایت‌های کوچک، بازی‌ها، نظرسنجی‌ها، آزمون و ابزارهای کاربردی بسازند و آن‌ها را با دیگران به اشتراک بگذارند. این تغییر، Attie را به بستری برای خلق و انتشار انواع مختلفی از محصولات حوزه فناوری تبدیل می‌کند.

AI Security AI & Machine Learning Programming & Languages
Source