Russia’s Federal Security Service (FSB) says it has detained a Swedish citizen for illegally crossing the Russian border on Thursday. The security service…
F5 security advisory (AV26-1049)
Is the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in the latest Threat Source newsletter.
SonicWall security advisory (AV26-1048)
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One...
The suspect was identified as 36-year-old Leonid Ryzhikov, a Russian citizen from St. Petersburg who served in the 2nd Battalion of Russia's 1009th Motorized Rifle Regiment.
Nearly 48 hours after Ukraine's Starshield terminals started mysteriously malfunctioning, nobody in Washington, nor at SpaceX, has taken responsibility for the apparent decision to hobble...
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An...
Russia has exploited an EU sanctions loophole to unfreeze $3 billion worth of assets held by Belgium's Euroclear, according to a Flemish media report, and Austria's Raiffeisen Bank could be about...
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns...
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS...
North Korea claims to have launched two cruise missiles from its bizarre modified Romeo class missile boat. The post North Korea’s ‘Hunchback’ Missile Submarine Makes First At-Sea Appearance For...
Latvia's decision last week to declare Russian-born journalist and blogger Leonid Ragozin persona non grata has drawn attention to a broader trend: Russians who once presented themselves as...
Ukrainian open-source intelligence (OSINT) group Absolutely Reliable Source reported the construction on Oct. 13, citing satellite imagery. The analysts identified eight launch positions and 32...
AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is that these tools are growing more confident in their own output...
Israeli adtech outfit allegedly helped spyware vendors infect phones while enjoying Google's seal of approval
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]
Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: Abstract: We estimate how much public...
The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers' registered names along with their numbers for incoming calls starting November 1,...
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. [...]
By 2026, the Defense Forces of Ukraine already had at their disposal several types of long-range cruise missiles and so-called missile-drones — ranging from the Long Neptune and Flamingo to the...
CEO said the workers were hired in Q2 and are still helping today
Russia’s medical universities have failed to fill their state-funded residency programs, with nearly 40% of targeted-training places remaining empty. Some universities have also struggled to fill...
Mr. President,I write these words without diplomatic formulas or ceremonial language. I write simply, from one human being to another, and from one president to another — two men who understand...
Drupal security advisory (AV26-1047)
HPE security advisory (AV26-1046)
ReversingLabs expanded the published hashes into a staging server, five stagers, two lure files and the domain-to-server links.
MFT and other trusted systems collect files, access and connections. Patching and inspecting what moves through it are separate defenses.
Google security advisory (AV26-1045)
Platform points to Iran, Russia, and China but provides no public evidence for attribution