Collaborate Disseminate
Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.
The post Signal Vulnerability Lets Malicious Callers Block Hang-Ups appeared first on SecurityWeek.
Continue reading Signal Vulnerability Lets Malicious Callers Block Hang-Ups
Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.
The post Splunk, SolarWinds Release Fresh Security Updates appeared first on SecurityWeek.
Continue reading Splunk, SolarWinds Release Fresh Security Updates
Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks.
The post Cisco Patches 34 Vulnerabilities Across Multiple Products appeared first on SecurityWeek.
Continue reading Cisco Patches 34 Vulnerabilities Across Multiple Products
Initial attempts were observed on October 17, and mass activity began shortly after patches were released.
The post PHP2Shell Exploitation Started Days Before Patches appeared first on SecurityWeek.
Continue reading PHP2Shell Exploitation Started Days Before Patches
The two RCE bugs can be exploited against WordPress, Drupal, Joomla, and other popular applications.
The post PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors appeared first on SecurityWeek.
Continue reading PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities.
The post Memory Bugs Account for Most of Chrome’s 353 New Security Fixes appeared first on SecurityWeek.
Continue reading Memory Bugs Account for Most of Chrome’s 353 New Security Fixes
The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them.
The post Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys appeared first on SecurityWeek.
Continue reading Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
Tasked with writing an application for a US defense contractor, the model made the code 19% more likely to be hackable.
The post Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor appeared first on SecurityWeek.
Continue reading Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor
Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution.
The post PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws appeared first on SecurityWeek.
Continue reading PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
Across multiple short compromise windows, users were served a downloader for the ShinyRoad modular backdoor framework.
The post AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign appeared first on SecurityWeek.
Continue reading AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign