dot-access through 1.0.0 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying a crafted dotted path to

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A low-privileged local user could exploit this

IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to perform

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged

Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating

In August 2026, data centre operator CyrusOne was the target of a ShinyHunters "pay or leak" extortion attempt. The group subsequently published data

The incidents involved the .gh (Ghana), .sl (Sierra Leone) and .as (American Samoa) namespaces, according to an update published by Google’s Chrome Secure Web

In research published on October 8, ESET documented MATCHBOIL samples compiled or observed between April 2024 and April 2026. The researchers found that each

An AI cyberattack on South Korean banks exposed how a suspected China-based threat actor combined an agentic penetration-testing tool with large language

A critical flaw in multiple Atlassian products is being exploited in the wild. No further details were provided in the source material.

The ASOS data breach involved an attacker using stolen employee login credentials to access information on third-party platforms. The retailer says payment

Post-quantum cryptography is moving up the security agenda. Reports from Europol and the US Government Accountability Office (GAO) urge organizations to

A warning published by the FBI and US Secret Service on October 6 cited SOCRadar figures showing that FortiBleed has compromised 86,644 devices in 194

Cloud security is the practice of protecting cloud-hosted data, services, identities and infrastructure from unauthorised access, disruption and misuse. It