home.social

Search

21 results for “beyondmachines1”

  1. BeyondMachines :verified: @beyondmachines1

    Pillow 13.0.0 Patches Critical Remote Code Execution Flaws in Python Image Processing

    Pillow version 13.0.0 addresses over 30 security vulnerabilities, including critical remote code execution flaws in EPS, JPEG, and TIFF processing that allow attackers to take over servers via crafted image uploads.

    **If your Python applications or servers process images (most do, through the Pillow library), update Pillow to version 13.0.0 ASAP and rebuild all your containers and virtual environments. Note that this version needs Python 3.11 or newer. Until everything is patched, remove Ghostscript from any server that handles uploaded images, and treat all image uploads from outsiders as potentially dangerous.**

    beyondmachines.net/event_detai

    #cybersecurity #infosec #advisory #vulnerability
  2. BeyondMachines :verified: @beyondmachines1

    Node.js Releases Critical Security Updates to Fix Brotli Remote Code Execution and Network Flaws

    Node.js released security updates for 10 vulnerabilities, including a critical remote code execution flaw in the Brotli decoder (CVE-2026-111497) and multiple network validation bypasses. These vulnerabilities reside in the core runtime, requiring administrators to update host systems, rebuild container images, and restart all services.

    **If you run Node.js anywhere, update it right away to version 22.23.4, 24.22.1 or 26.12.1, then rebuild any containers or apps that bundle Node.js and restart all Node.js services (your usual dependency scanners won't catch this, so check the runtime versions yourself). If you're still on old versions like 20.x, 23.x or 25.x, they will never be fixed. Move to a supported version ASAP. Until you can patch, block Brotli-compressed (br) traffic at your proxy or firewall as a temporary shield.**

    beyondmachines.net/event_detai

    #cybersecurity #infosec #advisory #vulnerability
  3. BeyondMachines :verified: @beyondmachines1

    Oracle Fixes 1295 Security Flaws in Massive October Update

    Oracle's October 2026 update fixes 1295 vulnerabilities, including six maximum-severity flaws (CVSS 10.0) that allow unauthenticated attackers to take over E-Business Suite, SOA Suite, and Access Manager.

    **If you use Oracle products, especially E-Business Suite, SOA Suite, Access Manager, JD Edwards, Siebel CRM or PeopleSoft, apply the October 2026 Critical Patch Update ASAP. Start with any systems reachable from the internet. If you can't patch right away, cut these systems off from the internet and block HTTP, T3 and IIOP access from untrusted networks until the patches are in.**

    beyondmachines.net/event_detai

    #cybersecurity #infosec #advisory #vulnerability
  4. BeyondMachines :verified: @beyondmachines1

    HPE Patches 72 Vulnerabilities in ArubaOS Including Eight CVSS 10.0 Flaws

    HPE released security updates for ArubaOS to fix 72 vulnerabilities, including 33 critical flaws that allow unauthenticated remote code execution and authentication bypass on wireless infrastructure.

    **If you use HPE Aruba devices running ArubaOS (AOS-8 or AOS-10), upgrade ASAP to a fixed version (AOS-10.8.1.2, 10.7.2.7, 10.4.1.14, 8.13.3.1 or 8.10.0.24). The patch has dozens of critical flaws let attackers take full control without a password. Make sure the web and CLI management interfaces are never reachable from the internet and can only be accessed from a dedicated, trusted management network.**

    beyondmachines.net/event_detai

    #cybersecurity #infosec #advisory #vulnerability
  5. BeyondMachines :verified: @beyondmachines1

    PHP Group Discloses New Unpatched Remote Code Execution Flaw Following PHP2Shell Updates

    The PHP Group disclosed a new unpatched remote code execution vulnerability (CVE-2026-115560) affecting session handlers, following emergency patches for two critical PHP2Shell flaws (CVE-2026-109618 and CVE-2026-109619).

    **If you run PHP, first make sure you’ve applied the emergency PHP2Shell patches from two days ago, then turn off session upload progress (session.upload_progress.enabled = Off) unless you actually need it, which blocks this new flaw. Ask your developers whether any code changes the session serializer with ini_set() before session_start(). Apply the official fix for CVE-2026-115560 as soon as PHP releases it.**

    beyondmachines.net/event_detai

    #cybersecurity #infosec #advisory #vulnerability
  6. BeyondMachines :verified: @beyondmachines1

    Navigate360 Vendor Breach Compromises Nevada SafeVoice School Safety Tips

    Nevada officials report that a data breach at vendor Navigate360 compromised personal information in approximately 10% of SafeVoice school safety tips.

    ****

    beyondmachines.net/event_detai

    #cybersecurity #infosec #incident #databreach
  7. BeyondMachines :verified: @beyondmachines1

    Capcom Confirms Data Breach Exposing 11.7 Million CAPCOM ID Accounts

    Capcom confirmed a data breach affecting 11.7 million CAPCOM ID accounts, exposing email addresses, IP addresses, and login metadata. The company detected the unauthorized access on October 19, 2026, and has implemented emergency security measures and notified Japanese authorities.

    ****

    beyondmachines.net/event_detai

    #cybersecurity #infosec #incident #databreach
  8. BeyondMachines :verified: @beyondmachines1

    Sydney Design Firm Virtual Ideas Targeted in Lamashtu Ransomware Extortion Attack

    Sydney-based 3D visualization firm Virtual Ideas suffered a data theft attack by the Lamashtu ransomware group, which stole 35GB of sensitive project and financial data.

    ****

    beyondmachines.net/event_detai

    #cybersecurity #infosec #incident #ransomware
  9. BeyondMachines :verified: @beyondmachines1

    City of Columbia Municipal Network Disrupted by Cyberattack

    The City of Columbia, South Carolina, suffered a cyberattack on October 21, 2026, that disrupted municipal services including the MyColaSC platform and GIS systems. Critical public safety systems remain operational. State law enforcement is investigating the breach and the city is working to restore affected applications.

    ****

    beyondmachines.net/event_detai

    #cybersecurity #infosec #incident #ransomware
  10. BeyondMachines :verified: @beyondmachines1

    I am expecting tips on detecting financial scammers from my electricity supplier, the petrol stations and all the supermarket chains

  11. BeyondMachines :verified: @[email protected]

    Arista Fixes Actively Exploited VeloCloud Orchestrator Zero-Day

    Arista patched a critical SQL injection zero-day (CVE-2026-114625) in VeloCloud Orchestrator that allows low-privileged users to gain full superuser control. Attackers are currently using this flaw to compromise SD-WAN management systems and potentially access connected edge devices.

    **If you run an on-premises VeloCloud Orchestrator, this is urgent. Your VeloCloud is under active attack. Update immediately to version 5.2.3.18, 6.1.3.10 or 6.4.2.12, and make sure the web management interface is reachable only from trusted admin networks. Before patching, save all system and database logs. Block 74.82.197.86 and 38.54.50.151 and check your web logs for odd URL paths or bursts of requests. If anything looks suspicious, change all passwords and credentials stored in the orchestrator.**
    #cybersecurity #infosec #attack #activeexploit
    beyondmachines.net/event_detai

    #cybersecurity #infosec #attack #activeexploit
  12. BeyondMachines :verified: @beyondmachines1

    Railway Discloses Secret Exposure Incident Linked to AI Hijacking Campaign

    Railway suffered a security breach where unauthorized actors accessed encrypted environment variables and obtained decrypted secrets, leading to cryptocurrency theft and potential LLMjacking risks. The company paused deployments and rotated credentials to contain the incident while advising users to replace all stored API keys and passwords.

    ****

    beyondmachines.net/event_detai

    #cybersecurity #infosec #incident #databreach
  13. BeyondMachines :verified: @beyondmachines1

    Quest Diagnostics Reports Breach of Quanum Lab Portal

    Quest Diagnostics reports a cyber breach affecting its Quanum Lab Services Manager platform, potentially exposing patient records and test results. The company is working with federal law enforcement and external experts to determine the full scope of the attack.

    ****

    beyondmachines.net/event_detai

    #cybersecurity #infosec #incident #databreach
  14. BeyondMachines :verified: @beyondmachines1

    Siemens October 2026 Advisories: Six Critical Fixes for PLCs, Edge Devices and CROSSBOW

    Siemens' October 2026 security updates patch critical vulnerabilities in four product families: the SIMATIC S7-1500 MFP GNU/Linux subsystem (code execution, privilege escalation), the S7-1500 web server's Trace page (eight XSS flaws enabling unauthorized PLC operations), Industrial Edge devices (authenticated path traversal), and RUGGEDCOM CROSSBOW (SQLite-based code execution). Only Industrial Edge and CROSSBOW (V6.0) have fixes so far, so for the MFP and web server issues Siemens advises restricting access, disabling unneeded web servers, keeping industrial devices off the internet and office networks, and watching ProductCERT for upcoming patches.

    **If you use Siemens industrial devices, make sure all of them (PLCs, HMIs, edge devices) are isolated from the internet and reachable only from trusted networks. Update RUGGEDCOM CROSSBOW to V6.0 and your Industrial Edge devices to the fixed versions ASAP. For SIMATIC S7-1500 controllers there are no fixes yet, so turn off the web server where you don't need it, never import trace files or run applications from untrusted sources. Apply Siemens' patches as soon as they're released.**

    beyondmachines.net/event_detai

    #cybersecurity #infosec #advisory #vulnerability
  15. BeyondMachines :verified: @beyondmachines1

    Oracle Issues Emergency Patch for Critical Java JSSE Vulnerability

    Oracle released an emergency security alert for CVE-2026-91403, a critical 9.1 CVSS vulnerability in the Java JSSE component that allows unauthenticated remote attackers to access or modify sensitive data. The flaw is caused by Java trusting compromised intermediate CA certificates and affects multiple versions of Java SE and GraalVM.

    **If you run Java anywhere (including copies bundled inside commercial software, application servers, containers and appliances), apply Oracle's emergency Security Alert patch for CVE-2026-91403 immediately. The October quarterly update does NOT fix this, so even recently patched systems need it. Start with internet-facing systems and web services, and where you can't patch right away, block the compromised certificates through the blocked.certs file. Plan to move any unsupported Java versions to a supported release.**

    beyondmachines.net/event_detai

    #cybersecurity #infosec #advisory #vulnerability
  16. BeyondMachines :verified: @beyondmachines1

    Ridgeway Pharmacy Website Vulnerability Exposes Data of 259,000 Customers

    Ridgeway Pharmacy reports a data breach affecting nearly 259,000 individuals after attackers exploited a vulnerability in its third-party developed website. The incident exposed sensitive health, prescription, and payment information. The company migrated to a new platform and offer credit monitoring services.

    ****

    beyondmachines.net/event_detai

    #cybersecurity #infosec #incident #databreach
  17. BeyondMachines :verified: @beyondmachines1

    Richmond Public Schools Investigates Cyberattack Following Threat Actor Claims of Stolen Data

    Richmond Public Schools disclosed a cybersecurity incident that disrupted Wi-Fi, phones, PowerSchool, security cameras, and other digital services across the district. Attackers claimed to have stolen sensitive information and threatened to publish the data, but RPS has not confirmed that information was taken.

    ****

    beyondmachines.net/event_detai

    #cybersecurity #infosec #incident #databreach
  18. BeyondMachines :verified: @[email protected]

    LiteLLM Supply Chain Attack and Critical Vulnerabilities Expose AI Infrastructure

    LiteLLM version 1.107.0 was compromised in a supply chain attack that distributed a credential stealer and a persistent backdoor via stolen GitHub OAuth tokens. The incident exposes cloud credentials, AI provider keys, and sensitive developer secrets across millions of installations.

    **If you use LiteLLM (or suspect you use it), this is urgent. Check for installed LiteLLM 1.107.0 or pulled its Docker images (even as "latest") on October 21. If you find any trace of LiteLLM 1.107.0 treat those machines as fully hacked: don't run pip, manually delete cook.pth, cook.py and sitecustomize.py from site-packages, kill the hidden Python process, and rebuild from scratch pinned to version 1.106.2. Then assume all your secrets were stolen and change them, including cloud keys, SSH keys, API keys, tokens and saved passwords, and block litellm.dev on your network.**
    #cybersecurity #infosec #attack #activeexploit
    beyondmachines.net/event_detai

    #cybersecurity #infosec #attack #activeexploit
  19. BeyondMachines :verified: @beyondmachines1

    STM and SAQ Shut Down Websites Following Critical PHP2Shell Disclosure

    The Société de transport de Montréal and the Société des alcools du Québec temporarily took their websites offline on October 21, 2026, as a precaution following the disclosure of two critical PHP vulnerabilities known as PHP2Shell. The flaws can allow unauthenticated remote code execution on affected servers, prompting precautionary shutdowns and urgent patching.

    ****

    beyondmachines.net/event_detai

    #cybersecurity #infosec #incident #databreach
  20. BeyondMachines :verified: @beyondmachines1

    Toronto Crime Stoppers Suspends Tip Services After Third-Party Data Breach

    Toronto Crime Stoppers suspended its tip collection services following a data breach at third-party provider Navigate360 that exposed 176,859 crime tips containing potentially identifying information. The incident prompted the Toronto Police Service to temporarily suspend its use of the program while additional security measures are reviewed.

    ****

    beyondmachines.net/event_detai

    #cybersecurity #infosec #incident #databreach
  21. Graham Knapp @graham_knapp

    RE: infosec.exchange/@beyondmachin

    That's lucky 😉

Share on Mastodon

Enter the server where you have an account.