Knowledge you can apply
Security for teams connecting data, documents and agents to AI.
Security advisory from the CPAN Security Group on Punk for Perl, versions 0.48 up to before 0.55. The module may forward Extended CONNECT requests to GET routes without validating the Origin header.
Read articleCybersecurity Radar: the release of FreeIPMI 1.6.20, an open-source IPMI management tool, was announced. The excerpt available does not state changes or fixes.
Read articleWikimedia reported attempts by AI agents to edit pages and compromise a note-taking tool, along with resource consumption on web platforms that already run with limited capacity. The report, dated 5 October 2026, was reproduced from The Record's feed through machine translation.
Read articlePress reports say an alleged ShinyHunters member was detained in Jordan and is cooperating with the FBI, while the agency responds to a breach that exposed employee data.
Read articleAdvisory on the oss-security list dated October 5, 2026: libexpat 2.9.0 fixes CVE-2026-102633 (integer overflow in expat_realloc on 32-bit platforms) and CVE-2026-77214 (validation of the len parameter in XML_ParseBuffer).
Read articleOn October 5, 2026, Jeremy Stanley replied on the oss-sec mailing list that early access to fixes helps cloud providers plan mitigations and find flaws before public advisories are published.
Read articleA 5 October 2026 oss-sec mailing list post says cloud providers receive advance vulnerability notices inconsistently and proposes centralized criteria for who qualifies.
Read articleThe organizers published the three-day schedule for Pwn2Own Ireland 2026 in Cork, with more than 60 entries and targets including phones, smart home devices, printers and AI infrastructure.
Read articleModerate-severity advisory on a race condition in the shared message formatter of Apache Struts, published on 5 October 2026 in the oss-sec mailing list feed.
Read articleImportant-severity advisory on the Apache Struts REST plugin, which reads request bodies without a size limit and can cause excessive server memory use from a single request.
Read articleA moderate-severity advisory, published on October 5, 2026 on the oss-sec feed, describing resource amplification in Apache Struts when BigDecimal parameters are rendered by the tag library.
Read articleModerate-severity advisory on an OGNL expression language injection flaw in the legacy RESTful action mapper of Apache Struts, shared on the oss-sec list on 5 October 2026, with affected version ranges listed.
Read articleUS and Australia warned of a newly observed problem in customer-managed NetScaler deployments, distinct from vulnerabilities disclosed the previous week. Citrix said it is monitoring the issue and that it is not linked to those earlier reports.
Read articleCPAN Security Group advisory, published October 5, 2026 on the oss-sec list, covering Net::Whois::Raw versions before 2.99044, where the pwhois tool may query the wrong domain when the name contains Unicode characters.
Read articleAdvisory from the CPAN Security Group, published on October 5, on YAML for Perl versions before 1.30: a loaded document can trigger the DESTROY method of arbitrary classes.
Read articleCPAN Security Group advisory on the YAML module for Perl: perl/glob documents loaded in versions before 1.27_001 can overwrite package variables and lead to arbitrary code execution.
Read articleATB, Ukraine's largest supermarket chain, confirmed a cyberattack after hackers posted an extortion demand on its website, according to The Record's feed.
Read articleCUPS maintainers announced a vulnerability disclosure policy and said version 2.4.20 will include several security fixes, according to an oss-sec mailing list post dated October 5, 2026.
Read articleAdvisory on a heap buffer overflow in the OpenJPEG encoder, versions 2.4.0 to 2.5.4 and git master, triggered by encoding parameters rather than a crafted input file.
Read articleA ransomware attack affected the College of Medicine at the University of Illinois Chicago (UIC) and resulted in the theft of some information stored on its servers, according to the news feed The Record.
Read articleRota Nacional
30 days, no card, with a starting quota. After that, Pix credit from R$ 10,00.