The Hacker News پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۹:۵۷

Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry

A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and while it is enabled, the attacker needs no account. When it is off, anyone with a valid account can still exploit the flaw, Red Hat said yesterday. The company has released fixed builds for eight Quay

Cloud Security

Read the full article at The Hacker News Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Pentest Partners پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۹:۴۸

Printerpix and the not so private photo album

TL;DR A bucketful of photos There are many services that allow digital photos to be converted to prints. These include a plethora of other printing services so that customer photos may be converted to picture books, mugs, magnetic photo tiles, clothing or even a throw. With the combination of destination, these services allow photos to […] The post Printerpix and the not so private photo album appeared first on Pen T…

Vulnerabilities & Zero-Day Cloud Security

Source

The Hacker News پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۹:۰۸

Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass

Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to denial-of-service (DoS) or an authentication bypass. The critical vulnerabilities that impact NetScaler ADC and NetScaler Gateway are listed below - CVE-2026-120868 (CVSS score: 9.3) - A memory overflow vulnerability in Packet

Vulnerabilities & Zero-Day Identity & Access Security

Source

The Hacker News پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۸:۴۵

186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers

Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence (AI) tools are being used to serve ClickFix-style lures, browser-hijacking malware, and a set of extensions that hijack user searches. This delivery pattern has been codenamed TypoPrompting by Island. "AI-app lookalikes that turn an attempt to reach a familiar tool into a prompt to verify,

Malware & Threats AI Security AI & Machine Learning

Source

Wordfence Blog پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۸:۰۹

PSA: Critical Apache HTTP/2 Vulnerability: What WordPress Site Owners Should Know

Apache has released a fix for a critical vulnerability in the HTTP/2 module of Apache HTTP Server. The issue, CVE-2026-119618, can lead to remote code execution on affected servers. If your WordPress site is hosted on Apache, ask your host whether its Apache server accepts HTTP/2 and whether the fix has been installed. Apache lists ...Read More The post PSA: Critical Apache HTTP/2 Vulnerability: What WordPress Site O…

Vulnerabilities & Zero-Day Cloud Security Web Development

Source