A previously unknown threat actor tracked as UTA0576 chained three Ivanti Connect Secure zero-day vulnerabilities to run code as root on VPN appliances without logging in. The attacks began in early October 2026 and hit at least one appliance that was fully patched at the time. Ivanti says exploitation has affected a limited number of […]
این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش میدهد. متن کامل در منبع اصلی منتشر شده است.
A malicious version of Anthropic’s Claude Code extension distributed through the Cursor marketplace attempted to install a persistent Secure Shell (SSH) backdoor on developers’ machines, potentially giving attackers remote access to systems holding source code, credentials and other sensitive information. “Between about 2:27am PT and 1:35pm PT today, a maliciously modified version of Anthropic’s Claude Code extension…
شرکت OpenAI این باگ را برطرف و ۵۰۰۰ دلار پاداش به پژوهشگران کشفکننده آن اهدا کرده است. The post آسیبپذیری خطرناک ChatGPT چتهای کاربر را از طریق لینک اشتراکگذاری فاش میکرد appeared first on دیجیاتو.
OverviewOn October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released fixes for both. Ivanti rates CVE-2026-111357, a missing authentication for critical function vulnerability (CWE-306), with a CVSSv3.1 score of 8.8; it allows a local authenticated attacker to escalate privileges. CVE-2026-118527, classified as generation of predictab…
This blog series highlights the top threat intelligence articles that our readers found the most interesting this month. The post Threat Intelligence RoundUp: October appeared first on DarkOwl, LLC.
