Information security
fromTheregister
4 hours agoMicrosoft patch fell short. New Windows flaw exploited
Attackers exploit a zero-click Windows flaw, CVE-2026-32202, exposing sensitive information on vulnerable systems.
#cve-2025-40551
#cve-2025-40551
[ follow ]
#cybersecurity #vulnerabilities #vulnerability #malware #data-breach #ransomware #ai #supply-chain-attack
fromSecurityWeek
13 hours ago38 Vulnerabilities Found in OpenEMR Medical Software
"In the most severe cases, SQL injection vulnerabilities combined with modest database privileges could have led to full database compromise, PHI exfiltration at scale, and remote code execution on the server."
Healthcare
fromSecuritymagazine
23 hours agoConnected Security: How Proactive Real-Time Tech Keeps Security Workers Safe
Security guards and law enforcement personnel are usually the first professionals to provide help in a public emergency and as a result, also experience some of the highest rates of workplace violence in any occupation.
Information security
fromArs Technica
12 hours agoWhy a recent supply-chain attack singled out security firms Checkmarx and Bitwarden
Current evidence indicates that this data originated from Checkmarx's GitHub repositories, and that access to those repositories was facilitated through the initial supply chain attack of March 23, 2023.
Information security
fromSecurityWeek
5 days agoVulnerabilities Patched in CrowdStrike, Tenable Products
CrowdStrike published an advisory for CVE-2026-40050, a critical unauthenticated path traversal vulnerability affecting its LogScale product. The flaw can allow a remote attacker to read arbitrary files from the server filesystem.
Information security
fromSecuritymagazine
6 days agoOperationally Ineffective: Putting CVEs in a Chokehold with Privilege Disruption
A Common Vulnerability Exposure (CVE) that cannot reach the privilege plane is operationally ineffective - even at a CVSS Score of 10. This should be a core philosophy that is embedded into the fabric of software engineering.
Information security
Information security
fromTNW | Next-Featured
1 week agoLovable security crisis: 48 days of exposed projects, closed bug reports, & the structural failure of vibe coding security
Lovable's security incidents expose vulnerabilities in AI-generated code and highlight a market focus on growth over security.
fromThe Hacker News
4 weeks agoNew Chrome Zero-Day CVE-2026-5281 Under Active Exploitation - Patch Released
"Use-after-free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page."
Information security
[ Load more ]