Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 23, 2026.
English. 106–120 of 239
Hard-Coded Credentials Found in HPE Instant On Devices Allow Admin Access
HPE fixed two flaws in Instant On Access Points that could allow admin access and command injection. Patch now to stay secure.
GPUHammer: New RowHammer Attack Variant Degrades AI Models on NVIDIA GPUs
NVIDIA urges ECC activation to mitigate GPUHammer, a RowHammer exploit threatening AI accuracy and data integrity on GPUs.
Over 600 Laravel Apps Exposed to Remote Code Execution Due to Leaked APP_KEYs on GitHub
GitGuardian uncovers 260,000 leaked Laravel APP_KEYs on GitHub, exposing over 600 apps to remote code execution.
U.S. Sanctions Russian Bulletproof Hosting Provider for Supporting Cybercriminals Behind Ransomware
U.S. sanctions Russian BPH provider Aeza Group for hosting ransomware attacks, dark web drugs, and cybercrime.
Manufacturing Security: Why Default Passwords Must Go
Default passwords like "1111" put critical infrastructure at risk. CISA urges manufacturers to fix this vulnerability.
Leveraging Credentials As Unique Identifiers: A Pragmatic Approach To NHI Inventories
Identity-based attacks are rising, with 83% involving compromised secrets. GitGuardian helps protect non-human identities and prevent breaches.
U.S. House Bans WhatsApp on Official Devices Over Security and Data Protection Issues
U.S. House bans WhatsApp on government devices due to security risks, recommending alternatives like Signal.
DHS Warns Pro-Iranian Hackers Likely to Target U.S. Networks After Iranian Nuclear Strikes
DHS warns of rising cyber threats from pro-Iranian hackers after U.S. airstrikes on Iran’s nuclear facilities.
Google Adds Multi-Layered Defenses to Secure GenAI from Prompt Injection Attacks
Google strengthens GenAI defenses with new safeguards against indirect prompt injections and evolving attack vectors.
Over 269,000 Websites Infected with JSFireTruck JavaScript Malware in One Month
Over 269K sites infected with JSFireTruck malware in one month, redirecting visitors to scams and malware.
How to Build a Lean Security Model: 5 Lessons from River Island
Lean security with automated exposure and threat detection helps River Island protect 200+ stores and e-commerce without growing the team.
Critical 10-Year-Old Roundcube Webmail Bug Allows Authenticated Users Run Malicious Code
Critical Roundcube bug CVE-2025-49113 affects versions before 1.6.11, enabling code execution via URL flaw.
Think Your IdP or CASB Covers Shadow IT? These 5 Risks Prove Otherwise
In 2024, dormant accounts, unmanaged SaaS access, and GenAI permissions expose enterprises to data breaches and insider threats.
Fake Recruiter Emails Target CFOs Using Legit NetBird Tool Across 6 Global Regions
Plug-and-play phishing kits like Haozi drive global scams, bypass MFA, and lower attacker skill bar.
The Crowded Battle: Key Insights from the 2025 State of Pentesting Report
Discover findings from Pentera's 2025 State of Pentesting Report, including breach rates, alert fatigue, budget trends & the rise of software testing.