Collaborate Disseminate
CVE-2026-102895 is a trivial authentication-bypass vulnerability. GPUStack is also an attractive target. It is open-source software that manages clusters of GPUs, which are typically used to run AI workloads. All versions of GPUStack prior to 2.2.0, which was released at the end of June. This vulnerability was not made public until the end of July, and the CVE was assigned on November 4th.
The attackers accessed chat transcripts for fewer than 1% of Notion workspaces. Most transcripts were unattributable.
The post Notion Customer Data Compromised in Fireworks AI Hack appeared first on SecurityWeek.
Continue reading Notion Customer Data Compromised in Fireworks AI Hack
Tim Peters, one of Python’s earliest and most influential contributors, died on July 15 at age 74. Known as Python’s second real user, Peters created the Zen of Python and Timsort sorting algorithm while contributing to numerous core components. He als… Continue reading Tim Peters, Python User #2 and Prolific Contributor, Dies At 74
The attackers exploited a vulnerability in a legitimate extension to bypass ScreenConnect authentication.
The post Hackers Deploy Malware in Fresh ScreenConnect Campaign appeared first on SecurityWeek.
Continue reading Hackers Deploy Malware in Fresh ScreenConnect Campaign
IRISSCON 2026, the annual cybercrime conference organized by IRISSCERT, took place at the Aviva Stadium in Dublin on November 11. The all-day event gives attendees a look at the cyber threats businesses are facing right now, along with practical advice… Continue reading Photos: IRISSCON 2026 cybercrime conference
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
The post Hackers Target N-central Zero-Days as N-able Rushes Patches appeared first on SecurityWeek.
Continue reading Hackers Target N-central Zero-Days as N-able Rushes Patches
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
The post Hackers Target N-central Zero-Days as N-able Rushes Patches appeared first on SecurityWeek.
Continue reading Hackers Target N-central Zero-Days as N-able Rushes Patches
Amazon Web Services has released AWS Emulator, a free tool that simulates AWS services on a developer’s laptop, a development server or in a continuous integration (CI) pipeline. The company says autonomous AI agents wrote the tool entirely, with no co… Continue reading AWS Emulator: Open-source tool for testing AWS apps locally, built by autonomous AI agents
A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trigger a crash on the database server. The crash occurs only if that server is later chosen to take over as the main server while it still lacks some recent… Continue reading Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover
A threat actor using stolen GitHub credentials has pushed a credential-stealing payload into tens of thousands of repositories since November 10. In more than 1,800 of them, the malware ran and shipped GitHub Actions secrets and cloud credentials to th… Continue reading Check your GitHub repos: A secret stealer hit tens of thousands of them