Automated cyber signal feeds.
CVE ID :CVE-2026-115775 Published : Oct. 23, 2026, 9:17 p.m. | 35 minutes ago Description :Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, the twisted.words.xish.domish ExpatElementStream parser allows an unauthenticated remote peer to keep a…
CVE ID :CVE-2026-79982 Published : Oct. 23, 2026, 8:17 p.m. | 1 hour, 35 minutes ago Description :The Bluetooth HCI USB transport class of the new USB device stack, subsys, copies every controller-to-host HCI packet into a USB transfer buffer before enqueuing…
CVE ID :CVE-2026-79977 Published : Oct. 23, 2026, 8:17 p.m. | 1 hour, 35 minutes ago Description :The WireGuard VPN service in subsys updated the peer endpoint from a message it could not authenticate. In handle_transport_data(), when the 32-bit receiver index of…
CVE ID :CVE-2026-91093 Published : Oct. 23, 2026, 7:17 p.m. | 33 minutes ago Description :A potential security vulnerability has been identified in HP One Agent for certain HP PC products, which might allow for escalation of privilege and/or arbitrary code…
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026, is suspected to be orchestrated…
CVE ID :CVE-2026-115812 Published : Oct. 23, 2026, 6:17 p.m. | 1 hour, 34 minutes ago Description :Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to execute arbitrary code…
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month. GitLab found that…
Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an “Autonomous Red Team Kill Chain Framework” referred to as Phantom. The threat actor…
CVE ID :CVE-2026-111594 Published : Oct. 22, 2026, 9:39 p.m. | 6 minutes ago Description :InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log…
CVE ID :CVE-2026-115419 Published : Oct. 22, 2026, 9:17 p.m. | 28 minutes ago Description :The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate…