#infosec — Public Fediverse posts

week 42, 2026: https://january1073.gitlab.io/sitrep.html
#sitrep #cybersecurity #infosec

🚨New ransom group blog posts!🚨

Group name: qilin
Post title: Toyota Canarias
Location: 🇪🇸 ES
Sector: Automotive
Info: https://cti.fyi/#disclosure/qilin/Toyota%20Canarias

Group name: Redact
Post title: Baker Donelson
Location: 🇺🇸 US
Sector: Legal
Info: https://cti.fyi/#disclosure/Redact/Baker%20Donelson

Group name: BrainCipher
Post title: AdminData.part1.rar
Organization: AdminData Inc.
Info: https://cti.fyi/#disclosure/BrainCipher/AdminData.part1.rar

Group name: BrainCipher
Post title: AdminData.part2.rar
Organization: Unknown
Info: https://cti.fyi/#disclosure/BrainCipher/AdminData.part2.rar

Group name: BrainCipher
Post title: RedirectedFolders.part01.rar
Info: https://cti.fyi/#disclosure/BrainCipher/RedirectedFolders.part01.rar

Group name: BrainCipher
Post title: RedirectedFolders.part02.rar
Info: https://cti.fyi/#disclosure/BrainCipher/RedirectedFolders.part02.rar

Group name: BrainCipher
Post title: RedirectedFolders.part03.rar
Info: https://cti.fyi/#disclosure/BrainCipher/RedirectedFolders.part03.rar

Group name: BrainCipher
Post title: RedirectedFolders.part04.rar
Info: https://cti.fyi/#disclosure/BrainCipher/RedirectedFolders.part04.rar

Group name: BrainCipher
Post title: RedirectedFolders.part05.rar
Info: https://cti.fyi/#disclosure/BrainCipher/RedirectedFolders.part05.rar

Group name: BrainCipher
Post title: RedirectedFolders.part06.rar
Info: https://cti.fyi/#disclosure/BrainCipher/RedirectedFolders.part06.rar

Group name: BrainCipher
Post title: RedirectedFolders.part07.rar
Info: https://cti.fyi/#disclosure/BrainCipher/RedirectedFolders.part07.rar

Group name: BrainCipher
Post title: SalesData.part1.rar
Organization: Unknown Service
Info: https://cti.fyi/#disclosure/BrainCipher/SalesData.part1.rar

Group name: BrainCipher
Post title: SalesData.part2.rar
Info: https://cti.fyi/#disclosure/BrainCipher/SalesData.part2.rar

Group name: BrainCipher
Post title: StudioAdviser.rar
Organization: Studio Adviser
Location: 🇺🇸 US
Sector: Professional Services
Info: https://cti.fyi/#disclosure/BrainCipher/StudioAdviser.rar

Group name: BrainCipher
Post title: StudioData.part01.rar
Organization: StudioData
Sector: Technology
Info: https://cti.fyi/#disclosure/BrainCipher/StudioData.part01.rar

Group name: BrainCipher
Post title: StudioData.part02.rar
Organization: StudioData
Sector: Technology
Info: https://cti.fyi/#disclosure/BrainCipher/StudioData.part02.rar

Group name: BrainCipher
Post title: StudioData.part03.rar
Organization: StudioData
Sector: Technology
Info: https://cti.fyi/#disclosure/BrainCipher/StudioData.part03.rar

Group name: BrainCipher
Post title: StudioData.part04.rar
Info: https://cti.fyi/#disclosure/BrainCipher/StudioData.part04.rar

Group name: BrainCipher
Post title: StudioData.part05.rar
Organization: StudioData
Location: 🇳🇱 NL
Sector: Media & Entertainment
Info: https://cti.fyi/#disclosure/BrainCipher/StudioData.part05.rar

Group name: BrainCipher
Post title: StudioData.part06.rar
Organization: StudioData
Sector: Technology
Info: https://cti.fyi/#disclosure/BrainCipher/StudioData.part06.rar

Group name: BrainCipher
Post title: StudioData.part07.rar
Organization: Studio Data Inc.
Location: 🇺🇸 US
Sector: Media & Entertainment
Info: https://cti.fyi/#disclosure/BrainCipher/StudioData.part07.rar

Group name: BrainCipher
Post title: StudioData.part08.rar
Organization: StudioData
Sector: Technology
Info: https://cti.fyi/#disclosure/BrainCipher/StudioData.part08.rar

Group name: BrainCipher
Post title: StudioData.part09.rar
Organization: StudioData
Info: https://cti.fyi/#disclosure/BrainCipher/StudioData.part09.rar

Group name: BrainCipher
Post title: StudioData.part10.rar
Organization: StudioData
Info: https://cti.fyi/#disclosure/BrainCipher/StudioData.part10.rar

Group name: BrainCipher
Post title: StudioData.part11.rar
Organization: StudioData
Location: 🇮🇹 IT
Sector: Professional Services
Info: https://cti.fyi/#disclosure/BrainCipher/StudioData.part11.rar

Group name: BrainCipher
Post title: StudioData.part12.rar
Organization: StudioData
Location: 🇺🇸 US
Sector: Media & Entertainment
Info: https://cti.fyi/#disclosure/BrainCipher/StudioData.part12.rar

Group name: BrainCipher
Post title: StudioData.part13.rar
Organization: Studio Data
Location: 🇺🇸 US
Sector: Professional Services
Info: https://cti.fyi/#disclosure/BrainCipher/StudioData.part13.rar

Group name: BrainCipher
Post title: StudioData.part14.rar
Organization: StudioData
Info: https://cti.fyi/#disclosure/BrainCipher/StudioData.part14.rar

Group name: Global Secret Group
Post title: Rosenberg & Pittinsky
Organization: Rosenberg & Pittinsky
Location: 🇺🇸 US
Sector: Legal
Info: https://cti.fyi/#disclosure/Global%20Secret%20Group/Rosenberg%20%26%20Pittinsky

Group name: Global Secret Group
Post title: Seminole Schools
Location: 🇺🇸 US
Sector: Education
Info: https://cti.fyi/#disclosure/Global%20Secret%20Group/Seminole%20Schools

#ransomware #cti #threatintelligence #cybersecurity #infosec

🧪 NEW BETA RELEASES 🧪

📱 iOS 27.2 RC (24B115)
📱 iPadOS 27.2 RC (24B115)
💻 macOS 27.2 RC (26B118)
📺 tvOS 27.2 RC (24K120)
🥽 visionOS 27.2 RC (24N118)
⌚ watchOS 27.2 RC (24S116)
🔨 Xcode 27.2 RC (27B48)

#apple #cybersecurity #infosec #security #ios

Tech took a beating this past week. It was the main target for attackers (ranking #2 out of 12 sectors) with 193 stories hitting the wire.

https://theperimetersite.com/report/377

#supplychain #infosec

The UK Electoral Commission wants to flag deepfakes to candidates within three hours. The laws behind it? 1983 or 2000. #deepfakes #elections #AI #cybersecurity #infosec

Source: https://securityaffairs.com/201307/uncategorized/deepfakes-and-election-manipulation-uk-watchdog-seeks-faster-detection.html

#introduction, round two. I'm Solomon: retired chef, network and systems engineer, CySA+, finishing an M.S. in cybersecurity at USF.

I build Brigade, open-source tooling that keeps AI coding agents honest: verified runs with signed exit codes, a code graph agents check before editing, and an evidence log of what they did. I also run a homelab SOC on Wazuh, TheHive, and MISP.

Here for blue team, agent security, and homelabs.

https://brigade.tools

#infosec #blueteam #aisecurity #homelab

🚨New ransom group blog post!🚨

Group name: incransom
Post title: Seetelhotels.de
Organization: Seetel Hotels
Location: 🇩🇪 DE
Sector: Hospitality & Tourism
Info: https://cti.fyi/#disclosure/incransom/Seetelhotels.de

#ransomware #cti #threatintelligence #cybersecurity #infosec

Join us THURSDAY @ 12:30pm CT for #ThursDef! A 30min fireside chat with defensive people around the industry.

This week's guest: Automotive Security Researcher @revers3everything joins us to talk about Privacy & Operational Security.

Register today at thursdef.com

#ThursdayDefensive #cybersecurity #infosec

🚨New ransom group blog posts!🚨

Group name: Deadlock
Post title: Greggio Argento
Location: 🇮🇹 IT
Sector: Technology
Info: https://cti.fyi/#disclosure/Deadlock/Greggio%20Argento

Group name: Deadlock
Post title: Far West Contractors
Sector: Construction
Info: https://cti.fyi/#disclosure/Deadlock/Far%20West%20Contractors

Group name: Helix
Post title: American Campus
Location: 🇺🇸 US
Sector: Education
Info: https://cti.fyi/#disclosure/Helix/American%20Campus

Group name: Helix
Post title: Southwire
Location: 🇺🇸 US
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/Helix/Southwire

Group name: Helix
Post title: Quikrete
Location: 🇺🇸 US
Sector: Construction
Info: https://cti.fyi/#disclosure/Helix/Quikrete

Group name: Helix
Post title: Smith Douglas Homes
Location: 🇺🇸 US
Sector: Construction
Info: https://cti.fyi/#disclosure/Helix/Smith%20Douglas%20Homes

Group name: Helix
Post title: Bay Alarm
Location: 🇺🇸 US
Sector: Technology
Info: https://cti.fyi/#disclosure/Helix/Bay%20Alarm

Group name: Helix
Post title: Personify Health
Location: 🇺🇸 US
Sector: Healthcare
Info: https://cti.fyi/#disclosure/Helix/Personify%20Health

Group name: Helix
Post title: Rheem Global
Location: 🇺🇸 US
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/Helix/Rheem%20Global

#ransomware #cti #threatintelligence #cybersecurity #infosec

Stop thinking about security as walls. You've already lost if you do. A high wall means nothing when you prop the back door open with a brick for the delivery guy.

https://theperimetersite.com/report/376

#databreach #infosec

Security Tip: Secrets management is more than just keeping keys out of GitHub. 🛡️

Hardcoding API keys or credentials in source code creates a permanent trail of risk. Instead:
1. Use a dedicated Secrets Manager (Vault, AWS, etc.).
2. Implement automated rotation.
3. Audit access logs regularly.

Treat every secret as temporary. Stay ahead of threats at https://cvedatabase.com
#InfoSec #CyberSecurity #CVE #AppSec

🆕 Scan results: the Trackers tab now says plainly when a page loaded no trackers, notes that some sites load theirs only after a visitor accepts the cookie banner, and still lists the tracking IDs found on the page.

https://scanmalware.com/changelog?mtm_campaign=social-changelog&mtm_source=mastodon&mtm_medium=social&mtm_kwd=202610181549#2026-10-18T15:49:00Z-1abc9950

#ScanMalware #InfoSec #ThreatIntel

FANCL and Attenir Disclose Data Breach Affecting Approximately 785,000 Customers

FANCL and its subsidiary Attenir disclosed a data breach affecting approximately 785,000 customer memberships following unauthorized access to their e-commerce platforms. The exposed information includes personal details, hashed secondary passwords, and membership records. The companies confirmed that credit card information and primary account passwords were not compromised.

****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/fancl-and-attenir-disclose-data-breach-affecting-approximately-785000-customers-w-l-o-a-l/gD2P6Ple2L

Meta's opt-out for AI scraping of your business website? Stop using Meta. That's not consent, that's the school bully taking your lunch and asking why you're in the canteen. Stay secure, my friends.

#Meta #AI #DataPrivacy #CyberSecurity #InfoSec

Source: https://securityaffairs.com/201300/ai/meta-wants-to-scrape-your-website-to-train-its-ai-and-you-cant-say-no.html

The year is 1997. I’m using a macro-enabled Excel spreadsheet to help estimate some costs.

The year is 2026. I’m using a macro-enabled Excel spreadsheet to help estimate some costs.

Bonus: Guess where I work?

#Excel #m365 #MicrosoftOffice #Microsoft #infosec #macros

🚨New ransom group blog posts!🚨

Group name: qilin
Post title: Dental Team FL
Location: 🇺🇸 US
Sector: Healthcare
Info: https://cti.fyi/#disclosure/qilin/Dental%20Team%20FL

Group name: qilin
Post title: Johnson & Pace
Location: 🇺🇸 US
Sector: Professional Services
Info: https://cti.fyi/#disclosure/qilin/Johnson%20%26%20Pace

Group name: qilin
Post title: SkyWorld Air Cargo
Sector: Other
Info: https://cti.fyi/#disclosure/qilin/SkyWorld%20Air%20Cargo

Group name: qilin
Post title: WalkingTree Technologies
Sector: Technology
Info: https://cti.fyi/#disclosure/qilin/WalkingTree%20Technologies

#ransomware #cti #threatintelligence #cybersecurity #infosec

The Japan Times and News2u Holdings Confirm Ransomware Attack and Alleged Data Leak

The Japan Times and News2u Holdings confirmed a ransomware attack on a legacy administrative server, with the Eclipse ransomware group claiming responsibility and allegedly stealing approximately 150GB of data. Potentially exposed information includes HR and business partner records, while current subscriber databases and payment systems remain unaffected.

****
#cybersecurity #infosec #incident #ransomware
https://beyondmachines.net/event_details/the-japan-times-and-news2u-holdings-confirm-ransomware-attack-and-alleged-data-leak-4-a-h-6-j/gD2P6Ple2L

🚨 New on Netskope Threat Labs: Threat Stats 📊

A continuously updated dashboard of the most prevalent threats across the Netskope One platform, globally and broken down by region and industry over a trailing 28-day window.

Right now:

🥇 ClickFix is #1 globally
🚀 SpyVPN climbed 40 places in a single window

🔗 https://threatlabs.netskope.com/stats

#ThreatIntel #Malware #InfoSec #CyberSecurity

NVIDIA shipped a local MCP server with the toggle ON by default. 12 tools, 6 can change your machine. One binary toggle, no per-action authorization.

Anthropic confirmed the STDIO command injection flaw is "by design."

The protocol won't save you. Screening will.

https://blog.relayshield.net/nvidia-turned-on-a-local-mcp-server-toggle-on-by-default

#MCP #AIAgents #InfoSec

HIGH severity: ConnectWise cloud services suspended post-credential compromise. Stolen Cloud Backup credential allowed attacker scripted access to 162+ Microsoft 365 tenants, including privilege escalation. Review tenant configs. https://radar.offseq.com/threat/connectwise-suspends-cloud-services-in-response-to-cyberattack-3fc59c7822bd7274 #OffSeq #Infosec #MSP #CloudSecurity

CVE-2026-94034: reflected XSS in SourceCodester Drug Recommendation System 1.0 password change page, CVSS 3.5. Public exploit, no patch yet. Review input handling now. #CVE #infosec https://www.valtersit.com/cve/CVE-2026-94034/

🆕 The pivot graph no longer joins sites only because their screenshots look broadly alike, which could draw an ordinary site next to an unrelated scam page. Such screenshot matches stay listed in the side panel, where you can add one to the graph by hand

https://scanmalware.com/graph?mtm_campaign=social-changelog&mtm_source=mastodon&mtm_medium=social&mtm_kwd=202610180956

#ScanMalware #InfoSec #ThreatIntel

🚨New ransom group blog posts!🚨

Group name: qilin
Post title: CREDIN
Sector: Agriculture & Food
Info: https://cti.fyi/#disclosure/qilin/CREDIN

Group name: qilin
Post title: Salauno
Sector: Agriculture & Food
Info: https://cti.fyi/#disclosure/qilin/Salauno

Group name: qilin
Post title: Grupo Cronica
Sector: Professional Services
Info: https://cti.fyi/#disclosure/qilin/Grupo%20Cronica

Group name: fulcrumsec
Post title: PingCAP / TiDB Cloud
Organization: PingCAP Inc.
Location: 🇨🇳 CN
Sector: Technology
Info: https://cti.fyi/#disclosure/fulcrumsec/PingCAP%20%2F%20TiDB%20Cloud

#ransomware #cti #threatintelligence #cybersecurity #infosec

🚨 EUVD-2026-98491

📊 Score: 7.1/10 (CVSS v3.1)
📅 Published: 2026-10-13 | Updated: 2026-10-19

📝 JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98491

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-104243

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: fastllm, fastllm, fastllm
🏢 Vendor: ztxz16
📅 Updated: 2026-10-19

📝 A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument data_offsets ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104243

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-98492

📊 Score: 5.4/10 (CVSS v3.1)
📅 Published: 2026-10-13 | Updated: 2026-10-19

📝 Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98492

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-98495

📊 Score: 5.4/10 (CVSS v3.1)
📅 Published: 2026-10-13 | Updated: 2026-10-19

📝 Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98495

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-104244

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: Apache Camel, Apache Camel
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-10-19

📝 Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component.

This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.

JGroupsEndpoint.createExchange(Messag...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104244

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-98496

📊 Score: 8.1/10 (CVSS v3.1)
📅 Published: 2026-10-13 | Updated: 2026-10-19

📝 Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98496

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-104245

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: fastllm, fastllm, fastllm
🏢 Vendor: ztxz16
📅 Updated: 2026-10-19

📝 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file third_party/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer ove...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104245

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-104246

📊 Score: 5.1/10 (CVSS v3.1)
📦 Product: diem, diem, diem (+1 more)
🏢 Vendor: diem-project
📅 Updated: 2026-10-19

📝 A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the component dmCodeEditor. Executing a manipulation...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104246

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-104247

📊 Score: 6.0/10 (CVSS v3.1)
📅 Updated: 2026-10-19

📝 A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic link. A local attacker who has already compromised the p...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104247

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-98498

📊 Score: 8.1/10 (CVSS v3.1)
📅 Published: 2026-10-13 | Updated: 2026-10-19

📝 Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98498

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-98499

📊 Score: 8.1/10 (CVSS v3.1)
📅 Published: 2026-10-13 | Updated: 2026-10-19

📝 Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98499

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-104248

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: online-clinic-management-system
🏢 Vendor: subhajitkhan
📅 Updated: 2026-10-19

📝 A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutati...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104248

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-98502

📊 Score: 9.6/10 (CVSS v3.1)
📅 Published: 2026-10-13 | Updated: 2026-10-19

📝 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98502

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-98506

📊 Score: 8.1/10 (CVSS v3.1)
📅 Published: 2026-10-13 | Updated: 2026-10-19

📝 Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98506

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-104249

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Doctor-Dignity
🏢 Vendor: llSourcell
📅 Updated: 2026-10-19

📝 A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function _get_lib_module of the file python/mlc_chat/chat_module.py. The manipulation of the argument model_lib results in cod...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104249

#cybersecurity #infosec #euvd #cve #vulnerability

I just solved Last Call on Hack The Box! https://labs.hackthebox.com/achievement/challenge/2026525/1851 #HackTheBox #HTB #CyberSecurity #EthicalHacking #InfoSec #PenTesting

OpenCode disclosed on Oct 17 that an intruder reached a legacy system and provider API keys saved in OpenCode Console "may have been exposed" (1.4% of Console users).

The gap in the coverage: "distillation attack" is the company's wording, not an established motive, and 1.4% has no published base.

Revoke at the provider, not only in Console.

https://thehackernews.com/2026/10/opencode-console-breach-may-have.html

#infosec #AI #opensource

Atac de tip ransomware la Radiocom, Societatea Națională de Radiocomunicații.
Serviciul de e-mail al companiei este indisponibil.

🔗 https://wp.me/p9KpFA-5KVb

#Știri #InfoSec #SecuritateInformatică #SecuritateCibernetică

🚨 EUVD-2026-104225

📊 Score: 6.3/10 (CVSS v3.1)
📦 Product: fatfree-core, fatfree-core, fatfree-core
🏢 Vendor: f3-factory
📅 Updated: 2026-10-19

📝 A vulnerability has been found in f3-factory fatfree-core up to 3.9.2. This vulnerability affects the function _curl of the file web.php of the component HTTP Client. Such manipulation leads to improper certificate valid...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104225

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-104224

📊 Score: 10.0/10 (CVSS v3.1)
📦 Product: Apache Camel, Apache Camel
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-10-19

📝 Deserialization of Untrusted Data vulnerability in Apache Camel.

This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.

The camel-hazelcast component applies a default Hazelcast Ja...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104224

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-104222

📊 Score: 8.2/10 (CVSS v3.1)
📦 Product: Apache Camel, Apache Camel, Apache Camel
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-10-19

📝 Improper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP, Netty HTTP, Undertow and Vert.x HTT...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104222

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-104223

📊 Score: 5.9/10 (CVSS v3.1)
📦 Product: Apache Camel, Apache Camel
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-10-19

📝 Server-Side Request Forgery (SSRF), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel Docling co...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104223

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-104221

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: Apache Camel, Apache Camel
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-10-19

📝 Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component.

This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1.

RedisConfiguration.getSerializer lazi...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104221

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-104220

📊 Score: 7.4/10 (CVSS v3.1)
📦 Product: Apache Camel, Apache Camel
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-10-19

📝 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component.

This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.

Th...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104220

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-104140

📊 Score: n/a
📦 Product: Apache Kylin
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-10-19

📝 Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.

This issue affects ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104140

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-104141

📊 Score: n/a
📦 Product: Apache Kylin
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-10-19

📝 Server-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin job service that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.

This issue affects Apac...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104141

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-104143

📊 Score: n/a
📦 Product: Apache Kylin
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-10-19

📝 Missing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.

This issue affects Apach...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104143

#cybersecurity #infosec #euvd #cve #vulnerability