CVE ID :CVE-2026-56768 Published : June 25, 2026, 6:05 p.m. | 1 hour, 34 minutes ago Description :Seahub before 13.0.23 does not enforce SHARE_LINK_LOGIN_REQUIRED on GET , allowing unauthenticated users to bypass authentication. Attackers with a folder share-link token can call the…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation of a critical security flaw impacting Lantronix EDS5000 Series devices, urging Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by June 26, 2026. The…
A coordinated law enforcement operation, in partnership with private sector companies, including Bitdefender, Bitsight, ESET, and Microsoft, has resulted in the takedown of criminal infrastructure powering Amadey and StealC. “The main common goal was to disrupt the ‘assembly lines’ cybercriminals…
CVE ID :CVE-2026-54904 Published : June 24, 2026, 3:44 p.m. | 3 hours, 47 minutes ago Description :concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReference#update can enter a permanent busy retry loop when the current value is Float::NAN.…
CVE ID :CVE-2026-13164 Published : June 24, 2026, 3:37 p.m. | 3 hours, 55 minutes ago Description :Missing Authentication for Critical Function (CWE-306) in the RegisterView (apps), exposed at POST /api/auth/register/, in MailerUp <1.0.1 allows a remote, unauthenticated attacker to self-register a…
CVE ID :CVE-2026-56121 Published : June 24, 2026, 2:49 p.m. | 4 hours, 43 minutes ago Description :Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by sending a crafted gRPC request…
Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area. The duo were…
CVE ID :CVE-2026-12958 Published : June 23, 2026, 4:03 p.m. | 3 hours, 24 minutes ago Description :Missing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of the workspace trust boundary. This may occur when a…
CVE ID :CVE-2026-12957 Published : June 23, 2026, 4:02 p.m. | 3 hours, 24 minutes ago Description :Improper trust boundary enforcement in Language Servers for AWS before version 1.65.0 on all supported platforms may allow a for arbitrary code execution. If a…
Security firm AIR built a fake AI agent skill, pushed it through a popular skill marketplace and an Instagram ad, and says it reached roughly 26,000 agents, including some on corporate accounts. Every skill security scanner the firm tested it against marked…