CyberPulse Cybersecurity News, with Source Links
FA
AWS Security Bulletins

CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

Bulletin ID: 2026-163-AWS Publication Date: 11/02/2026 11:00 AM PST Description: aidlc-traceability is an open source command-line tool, formerly published in the awslabs/aidlc-workflows repository, that generates traceability-matrix reports from a project's AI-DLC artifact files. We identified CVE-2026-120497, where stored cross-site scripting (XSS) in the HTML report generator in the aidlc-traceability CLI could al…

Vulnerabilities & Zero-Day Cloud Computing Open Source App & Web Security
Read the full article at AWS Security Bulletins Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
Censys Research

Thoughts on Vulnerability Response in the Era of the Vulnpocalypse and PHP2Shell

There is no shortage of security vulnerabilities. Threat actors have never needed sophisticated exploits to breach organizations; they can and do use simple methods of initial access. They don’t even need a CVE: stolen credentials and good old-fashioned social engineering are still painfully effective. So when various AI products are marketed with doomsday warnings that […] The post Thoughts on Vulnerability Response…

Vulnerabilities & Zero-Day Data Breach
Source
AWS Security Bulletins

CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench

Bulletin ID: 2026-162-AWS Publication Date: 11/02/2026 09:30 AM PST Description: Virtual Engineering Workbench (VEW) is an open-source platform where platform engineers define and publish development environments, and developers provision them on demand through a web portal. We identified CVE-2026-119085, where improper neutralization of special elements used in a template engine in the publishing component of Amazon…

Vulnerabilities & Zero-Day Cloud Computing Open Source
Source
Security Onion

Security Onion 3.4.0 Now Available including Agentic AI Automations!

Security Onion 3.4.0 is now available and includes new features, updated components, and many quality of life improvements!The highlight of this release is Agentic AI Automations for Security Onion Pro users! Your browser does not support the video tag. Download the video. Updated ComponentsThis release updates:Axios to 1.20.0containerd to 2.3.6CyberChef to 11.5.0Docker to 29.8.1dompurify to 3.4.17ElastAlert2 to 2.32…

Cloud Computing DevOps & Infrastructure Operating Systems
Source
Industrial Cyber

Hackers manipulate supermarket freezer temperatures across Europe, exposing weaknesses in connected OT systems

A new spree of cyberattacks targeting supermarket refrigeration systems has spread across Europe, affecting grocery chains in at... The post Hackers manipulate supermarket freezer temperatures across Europe, exposing weaknesses in connected OT systems appeared first on Industrial Cyber.

Malware & Threats Vulnerabilities & Zero-Day Phishing
Source