🕵️ RESEARCH & DEEP DIVES
ChatGPT can now connect to your personal apps to mimic writing style — BleepingComputer
Hackers exploit new MikroTik RouterOS flaws to hijack routers — BleepingComputer
ConnectWise warns of new ScreenConnect flaw without patch — BleepingComputer
N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw — The Hacker News
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies — The Hacker News
Ollama GGUF Decoder gguf.go readGGUFV1String integer overflowA vulnerability ... — CVE ThreatInt
Incorrect access control in PrestaShopVulnerability involving incorrect acces... — CVE ThreatInt
Odh-dashboard: odh-dashboard: nim credential secret readable by any authentic... — CVE ThreatInt
ModelCloud GPTQModel Triton dequantization kernel tritonv2.py out-of-boundsA ... — CVE ThreatInt
Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow re... — CVE ThreatInt
BookStack Attachment Edit Endpoint AttachmentController.php getUpdateForm acc... — CVE ThreatInt
QSPI flash encryption side-channel leakageAny application that uses external ... — CVE ThreatInt
The Continuous Glucose Monitoring Service's Record Access Control Point (RACP... — CVE ThreatInt
jaychouchannel Tourism-Management-System CommonController.java getOption info... — CVE ThreatInt
nRF54H20: MCUBoot can be tricked to executing unauthenticated codeWhen using ... — CVE ThreatInt
An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 t... — CVE ThreatInt
OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows ... — CVE ThreatInt
jaychouchannel Tourism-Management-System CommonDao CommonController.java sql ... — CVE ThreatInt
Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file writeTh... — CVE ThreatInt
OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows l... — CVE ThreatInt
The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local ... — CVE ThreatInt
OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows a... — CVE ThreatInt
An incorrect buffer size calculation in the Windows Interactive Service in Op... — CVE ThreatInt
The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows lo... — CVE ThreatInt
Following legal support, both Nitter and Xcancel are coming back online. — @GossiTheDog@cyberplace.social
-Network of paid YouTube accounts attacks Democrats ahead of Midterms -Russia's disinformation laundering in Greece... — @campuscodi@mastodon.social
-Roanoke discloses breach after three months -Trezor breach stats go from 14k to 67k users -C# 15 gets new security... — @campuscodi@mastodon.social
-BEC campaign steals €35 million from French notaries -OpenAI agents hack a German wiki -Five Eyes tells hacked... — @campuscodi@mastodon.social
Fake Minecraft Mod Deploys Myth Stealer RAT to Steal Browser Credentials and Cookies — Cyber Security News
Telerik Flaw Chain Lets Unauthenticated Attackers Turn Padding Oracle Into Remote Code Execution — Cyber Security News
OpenVPN Fixes 7 Security Flaws Affecting VPN Connections and Windows Systems — Cyber Security News
Malicious Chrome Extension Can Steal Login Sessions and Turn PCs Into Remote Backdoors — Cyber Security News
N-able Released Hotfix for RCE Vulnerability Affecting Platform — Cyber Security News
Critical Software Vulnerabilities Surge From Under 100 to More Than 600 a Month — Cyber Security News
Advantech WISE-6610 Series Critical RCE via Basic Station Command Injection — thehackerwire.com (discovered)
How to Verify Email Addresses in HubSpot With EasyDMARC — securityboulevard.com (discovered)
Mapping NIST CSF to ISO 27001 in practice — securityboulevard.com (discovered)
What if malware could run on a machine but still be unable to cause major damage? (looking for criticism on a security concept) — r/cybersecurity
🔓 CVEs & KEV
CVE-2026-18480 — WPScan SureCart — CVSS 8.8 — SureCart before 4.6.3 - Subscriber+ Administrator Account TakeoverThe SureCart Wor...
CVE-2026-84219 — WPScan Kirki — CVSS 7.5 — Kirki 6.2.1 - 6.2.5 - Unauthenticated Stored XSS via HTML Entity DecodingThe ...