Automated cyber signal feeds.
The U.K.’s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gathering efforts on behalf of Beijing’s state security service. In a “Security Service Espionage Alert” issued on September 30, 2026,…
The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries. The activity, observed by the Symantec and Carbon Black Threat…
CVE ID :CVE-2026-105115 Published : Oct. 3, 2026, 2:16 p.m. | 5 hours, 16 minutes ago Description :OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that allows remote attackers to load classes without authentication.…
CVE ID :CVE-2026-75937 Published : Oct. 2, 2026, 8:33 p.m. | 55 minutes ago Description :A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the…
CVE ID :CVE-2026-82039 Published : Oct. 2, 2026, 8:17 p.m. | 1 hour, 11 minutes ago Description :UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder() that allows authenticated attackers to inject arbitrary SQL by supplying malicious assetType and groupName values…
CVE ID :CVE-2026-39718 Published : Oct. 2, 2026, 8:17 p.m. | 1 hour, 11 minutes ago Description :Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross Site Request Forgery.This issue affects Wallstreet: from n/a through 2.8.6. Severity: 8.8 | HIGH…
CVE ID :CVE-2026-104988 Published : Oct. 2, 2026, 8:17 p.m. | 1 hour, 11 minutes ago Description :A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via BasicAuth without…
CVE ID :CVE-2026-104019 Published : Oct. 2, 2026, 8:17 p.m. | 1 hour, 11 minutes ago Description :OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before…
CVE ID :CVE-2026-103958 Published : Oct. 2, 2026, 7:07 p.m. | 20 minutes ago Description :Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain…
CVE ID :CVE-2026-103957 Published : Oct. 2, 2026, 7:06 p.m. | 21 minutes ago Description :Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of…