[Control systems] Johnson Controls security advisory (AV26-1052)
[Control systems] Schneider Electric security advisory (AV26-1051)
The Marines have been the primary interested party in the MQ-72C, but the Army already flies the UH-72 Lakota and needs similar capabilities. The post MQ-72C Cargo Helicopter Drone Capabilities...
JetBrains security advisory (AV26-1050)
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind...
Trump announced a new facility aimed at testing autonomous weapons, space, and electronic warfare technology, supersonics and hypersonics. The post New Montana “Super Range” Complex Could Add...
Russia’s Federal Security Service (FSB) says it has detained a Swedish citizen for illegally crossing the Russian border on Thursday. The security service…
F5 security advisory (AV26-1049)
Is the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in the latest Threat Source newsletter.
SonicWall security advisory (AV26-1048)
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One...
The suspect was identified as 36-year-old Leonid Ryzhikov, a Russian citizen from St. Petersburg who served in the 2nd Battalion of Russia's 1009th Motorized Rifle Regiment.
Nearly 48 hours after Ukraine's Starshield terminals started mysteriously malfunctioning, nobody in Washington, nor at SpaceX, has taken responsibility for the apparent decision to hobble...
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An...
Russia has exploited an EU sanctions loophole to unfreeze $3 billion worth of assets held by Belgium's Euroclear, according to a Flemish media report, and Austria's Raiffeisen Bank could be about...
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns...
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS...
North Korea claims to have launched two cruise missiles from its bizarre modified Romeo class missile boat. The post North Korea’s ‘Hunchback’ Missile Submarine Makes First At-Sea Appearance For...
Latvia's decision last week to declare Russian-born journalist and blogger Leonid Ragozin persona non grata has drawn attention to a broader trend: Russians who once presented themselves as...
Ukrainian open-source intelligence (OSINT) group Absolutely Reliable Source reported the construction on Oct. 13, citing satellite imagery. The analysts identified eight launch positions and 32...
AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is that these tools are growing more confident in their own output...
Israeli adtech outfit allegedly helped spyware vendors infect phones while enjoying Google's seal of approval
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]
Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: Abstract: We estimate how much public...
The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers' registered names along with their numbers for incoming calls starting November 1,...
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. [...]
By 2026, the Defense Forces of Ukraine already had at their disposal several types of long-range cruise missiles and so-called missile-drones — ranging from the Long Neptune and Flamingo to the...
CEO said the workers were hired in Q2 and are still helping today
Russia’s medical universities have failed to fill their state-funded residency programs, with nearly 40% of targeted-training places remaining empty. Some universities have also struggled to fill...
Mr. President,I write these words without diplomatic formulas or ceremonial language. I write simply, from one human being to another, and from one president to another — two men who understand...