World watch
Trending security news, summarized in controlled English. 662 brief(s). Each one: what happened, why it matters, what to do.
MSRC updated acknowledgements for four elevation of privilege CVEs with no change to technical details or fixes.
A podcast discusses ISO standards and vendor scoring claims without reporting a specific security incident or attack event now.
CISA confirms active attacks on two PHP flaws as researchers report successful exploits leading to working PHP2Shell access in affected systems now.
The report comes from SecurityWeek. 1 outlet reported this event inside 18 hours. Here is what happened, why it matters, and what to do next.
Researchers found a vulnerability chain in Kubernetes, Konnectity and overlay networks that allowed isolation bypass and remote code execution in cloud...
New organizations appear in FortiBleed 2.0 attacks while prior victims still show backdoors from earlier activity.
Apple fixes 286 bugs in iOS and macOS 27.2 and backports a fix for an exploited CoreGraphics zero-day to iOS 18.
Anthropic cites possible harms from runaway AI in an IPO filing noted by SecurityWeek for investor risk disclosure.
The report comes from Cisco Talos. 1 outlet reported this event inside 18 hours. Here is what happened, why it matters, and what to do next.
The report comes from Malware News. 1 outlet reported this event inside 18 hours. Here is what happened, why it matters, and what to do next.
A new database indexes IT and OT vulnerabilities for ship and port systems, including a subset linked to maritime-specific products.
N0n added Company #111 to a leak site after listing retail and facility services in the United Arab Emirates as a pending exposure.
Everest published six new victims on Ransomware.live with no further details stated in the source material.
Six victims listed on Ransomware.live across different sectors in one reporting cycle.
Experts note no observed exploitation of a Brotli defect despite an earlier emergency response to the open-source library issue.
A Japanese virtual desktop cloud used for foreign exchange trading was hacked after the company was slow to fix known holes in the service.
A New Mexico hospital diverts patients and closes more than 30 clinics after a cybersecurity issue affects care access now.
A patchwork of AI security benchmarks targets different variables but offers no complete measure of model security in practice.
A configuration mismatch exposed KV cache pages across requests on GLM-5.3 for Workers AI before Cloudflare applied a fix with SGLang.
A worm placed large payload blobs in GitHub repos to evade code search and limit detection across affected projects now.