> TODAY'S SUMMARY (16 articles)
Today's cybersecurity news highlights several significant threats and trends. Researchers have demonstrated a remote code execution (RCE) exploit in Node.js, termed "Node2Shell," that leverages malicious Brotli data to run attacker-supplied code. Additionally, attackers are attempting to exploit newly disclosed PHP2Shell vulnerabilities to incorporate systems into a Mirai botnet variant, with attempts noted just days prior to patch releases. Iran's "Prince of Persia" APT has reestablished a command and control server in the U.S. after several years. Meanwhile, INTERPOL's Operation Serengeti III has resulted in over 1,400 arrests and the recovery of $105 million, showcasing ongoing global efforts to combat cybercrime. Lastly, a serious breach at Capcom has exposed 11.7 million accounts, underscoring the persistent risks of data leaks.
|
// AI-powered summary generated at 08:01
CVSSv3 Score:
5.3
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] in FortiOS SSL-VPN may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted...
CVSSv3 Score:
7.9
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiSandbox may allow an unauthenticated attacker to execute commands via crafted requests.FortiSandbox PaaS versions 4.4.8 and 5.0.5 contains the fix for t...
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVSSv3 Score:
6.8
A missing authorization vulnerability [CWE-862] in FortiAuthenticator may allow a read-only user to make modification to local users via a file upload to an unprotected endpoint.
Revised on 2026-02-10 00:00:00
Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to elevate privileges locally.
Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network.
En exploitant une faille dans le logiciel SmarterMail, les pirates du gang Warlock sont parvenus Ă s'introduire sur les serveurs de l'Ă©diteur SmarterTools.
Le post L’éditeur SmarterTools piraté à cause d’une faille dans son propre logiciel a été publié sur IT-Connect.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally.
Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Quantickle is a browser-based tool designed for creating visual representations of threat research.
The post RSAC Releases Quantickle Open Source Threat Intelligence Visualization Tool appeared first on SecurityWeek.
Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
This year will mark the turning point where artificial intelligence will stop assisting and start acting. We will witness a qualitative leap towards agent-based or agentive AI, capable of making autonomous decisions, managing complex workflows, and executing end-to-end tasks w...
Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
Enterprise CISOs are increasingly willing — and eager — to jump ship, with some frustrated enough to want to leave cybersecurity entirely.Â
A recent survey of security leaders from IANS Research and Artico Search found that 69% of security executives “are open to making a c...
Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
In this Help Net Security interview, Andrew Northern, Principal Security Researcher at Censys, explains why mentorship matters and what organizations risk losing when senior staff disengage. He argues that institutional memory and judgment under pressure are difficult to rebuild once they disappear....