Automated cyber signal feeds.
A coordinated law enforcement operation, in partnership with private sector companies, including Bitdefender, Bitsight, ESET, and Microsoft, has resulted in the takedown of criminal infrastructure powering Amadey and StealC. “The main common goal was to disrupt the ‘assembly lines’ cybercriminals…
CVE ID :CVE-2026-54904 Published : June 24, 2026, 3:44 p.m. | 3 hours, 47 minutes ago Description :concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReference#update can enter a permanent busy retry loop when the current value is Float::NAN.…
CVE ID :CVE-2026-13164 Published : June 24, 2026, 3:37 p.m. | 3 hours, 55 minutes ago Description :Missing Authentication for Critical Function (CWE-306) in the RegisterView (apps), exposed at POST /api/auth/register/, in MailerUp <1.0.1 allows a remote, unauthenticated attacker to self-register a…
CVE ID :CVE-2026-56121 Published : June 24, 2026, 2:49 p.m. | 4 hours, 43 minutes ago Description :Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by sending a crafted gRPC request…
Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area. The duo were…
CVE ID :CVE-2026-12958 Published : June 23, 2026, 4:03 p.m. | 3 hours, 24 minutes ago Description :Missing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of the workspace trust boundary. This may occur when a…
CVE ID :CVE-2026-12957 Published : June 23, 2026, 4:02 p.m. | 3 hours, 24 minutes ago Description :Improper trust boundary enforcement in Language Servers for AWS before version 1.65.0 on all supported platforms may allow a for arbitrary code execution. If a…
Security firm AIR built a fake AI agent skill, pushed it through a popular skill marketplace and an Instagram ad, and says it reached roughly 26,000 agents, including some on corporate accounts. Every skill security scanner the firm tested it against marked…
President Trump signed an executive order on June 22 setting hard deadlines for federal agencies to move high-value assets and high-impact systems to post-quantum cryptography. Key establishment must move by December 31, 2030; digital signatures by December 31, 2031. EO 14409 leaves…
CVE ID :CVE-2026-53779 Published : June 22, 2026, 6:22 p.m. | 55 minutes ago Description :WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to read files outside the configured IMG_PATH directory by sending…