https://secopssignal.com/Tech and security news that mattersenThu, 22 Oct 2026 17:46:04 +0000https://secopssignal.com/news/vulnerabilities/librsvg-use-after-free-in-xinclude-parsing/https://secopssignal.com/news/vulnerabilities/librsvg-use-after-free-in-xinclude-parsing/Thu, 22 Oct 2026 17:41:49 +0000VulnerabilitiesA high-severity memory corruption flaw in Librsvg involves a use-after-free error via crafted SVG files, with fixes available across several major release branches.https://secopssignal.com/news/vulnerabilities/metr-finds-vulnerabilities-in-openais-internal/https://secopssignal.com/news/vulnerabilities/metr-finds-vulnerabilities-in-openais-internal/Thu, 22 Oct 2026 17:22:03 +0000VulnerabilitiesA safety research group identified flaws in OpenAI’s monitoring tools that could allow AI agents to conceal recent actions during a stress test.https://secopssignal.com/news/vulnerabilities/npm-toml-high-severity-denial-of-service/https://secopssignal.com/news/vulnerabilities/npm-toml-high-severity-denial-of-service/Thu, 22 Oct 2026 17:20:07 +0000VulnerabilitiesA high-severity flaw in the npm toml package allows attackers to freeze Node.js processes with small, malicious files, exposing applications that parse untrusted data.https://secopssignal.com/news/cyber-attacks/keeper-security-adds-ai-phishing-protection-to/https://secopssignal.com/news/cyber-attacks/keeper-security-adds-ai-phishing-protection-to/Thu, 22 Oct 2026 14:05:25 +0000Cyber AttacksKeeper Security introduces a local AI engine in its browser extension to detect spoofed login pages and prevent credential theft from fraudulent sites.https://secopssignal.com/news/vulnerabilities/jeewms-path-traversal-flaw-allows-unauthenticated/https://secopssignal.com/news/vulnerabilities/jeewms-path-traversal-flaw-allows-unauthenticated/Thu, 22 Oct 2026 13:33:45 +0000VulnerabilitiesRemote attackers can read arbitrary server files via a path traversal bug in JeeWMS, bypassing authentication controls to access sensitive data.https://secopssignal.com/news/vulnerabilities/json-scada-high-severity-sql-injection-lets-users/https://secopssignal.com/news/vulnerabilities/json-scada-high-severity-sql-injection-lets-users/Thu, 22 Oct 2026 11:52:46 +0000VulnerabilitiesA high-severity SQL injection in JSON-SCADA lets logged-in users alter historian records through specific API parameters in versions prior to 0.65-alpha.https://secopssignal.com/news/cyber-attacks/weak-credentials-and-stale-accounts-enabled/https://secopssignal.com/news/cyber-attacks/weak-credentials-and-stale-accounts-enabled/Thu, 22 Oct 2026 10:06:04 +0000Cyber AttacksThe UK ICO reprimanded Data Cymru and its IT provider for allowing a weak password on a dormant test account to facilitate a major data exfiltration.https://secopssignal.com/news/vulnerabilities/e-business-suite-workflow-faces-unauthenticated/https://secopssignal.com/news/vulnerabilities/e-business-suite-workflow-faces-unauthenticated/Thu, 22 Oct 2026 09:09:58 +0000VulnerabilitiesOracle’s October 2026 patch cycle addresses 1,295 security issues, including a maximum-severity vulnerability allowing remote takeover of E-Business Suite Workflow components.https://secopssignal.com/news/vulnerabilities/erlang-esaml-cve-2026-93471-saml-amplification/https://secopssignal.com/news/vulnerabilities/erlang-esaml-cve-2026-93471-saml-amplification/Thu, 22 Oct 2026 07:53:31 +0000VulnerabilitiesAn unauthenticated attacker can crash Erlang servers using a small, crafted SAML payload that expands into gigabytes of memory before signature verification occurs.https://secopssignal.com/news/vulnerabilities/aws-strands-agents-cve-2026-78379-remote-code/https://secopssignal.com/news/vulnerabilities/aws-strands-agents-cve-2026-78379-remote-code/Thu, 22 Oct 2026 06:03:28 +0000VulnerabilitiesA crafted prompt can bypass human approval gates in the Strands Agents python_repl tool, allowing remote actors to execute arbitrary code on the host.https://secopssignal.com/news/vulnerabilities/oracle-soa-suite-t3-iiop-vulnerability-allows/https://secopssignal.com/news/vulnerabilities/oracle-soa-suite-t3-iiop-vulnerability-allows/Thu, 22 Oct 2026 04:21:36 +0000VulnerabilitiesAn unauthenticated flaw in Oracle SOA Suite allows attackers to take over the application with network access via T3 or IIOP protocols.https://secopssignal.com/news/vulnerabilities/oracle-identity-manager-ldap-gateway-allows/https://secopssignal.com/news/vulnerabilities/oracle-identity-manager-ldap-gateway-allows/Thu, 22 Oct 2026 03:58:28 +0000VulnerabilitiesA critical flaw in Oracle Identity Manager Connector permits remote attackers to seize full control without credentials via the LDAP interface.https://secopssignal.com/news/vulnerabilities/gitlab-integer-overflow-in-regex-parsing-permits/https://secopssignal.com/news/vulnerabilities/gitlab-integer-overflow-in-regex-parsing-permits/Thu, 22 Oct 2026 02:26:44 +0000VulnerabilitiesSelf-managed GitLab users must upgrade to patched versions to close a critical integer overflow flaw that could allow remote code execution without authentication.https://secopssignal.com/news/vulnerabilities/apache-pulsar-shadow-topic-auth-flaw-cve-2026/https://secopssignal.com/news/vulnerabilities/apache-pulsar-shadow-topic-auth-flaw-cve-2026/Wed, 21 Oct 2026 18:52:36 +0000VulnerabilitiesAn authorization gap in Apache Pulsar shadow topics lets users read data from other tenants and trigger unintended data deletion operations.https://secopssignal.com/news/vulnerabilities/d-link-dhp-w610av-hnap-vulnerability-enables/https://secopssignal.com/news/vulnerabilities/d-link-dhp-w610av-hnap-vulnerability-enables/Wed, 21 Oct 2026 10:28:28 +0000VulnerabilitiesA critical vulnerability in D-Link powerline adapters permits remote attackers to set empty passwords via HNAP login manipulation.https://secopssignal.com/news/cloud-security/connectwise-app-identity-compromise-exposes/https://secopssignal.com/news/cloud-security/connectwise-app-identity-compromise-exposes/Wed, 21 Oct 2026 08:05:11 +0000Cloud SecurityStolen service credentials allowed attackers to bypass user passwords and access customer data, forcing ConnectWise to suspend cloud backup and management services.https://secopssignal.com/news/vulnerabilities/totolink-x2000r-firmware-cve-2026-10135/https://secopssignal.com/news/vulnerabilities/totolink-x2000r-firmware-cve-2026-10135/Wed, 21 Oct 2026 03:23:03 +0000VulnerabilitiesA critical vulnerability in specific TOTOLINK X2000R firmware allows authenticated attackers to execute arbitrary code via crafted HTTP requests.https://secopssignal.com/news/vulnerabilities/totolink-x2000r-stack-buffer-overflow-in-ipv6/https://secopssignal.com/news/vulnerabilities/totolink-x2000r-stack-buffer-overflow-in-ipv6/Wed, 21 Oct 2026 01:40:56 +0000VulnerabilitiesAuthenticated attackers can execute arbitrary code on specific Totolink X2000R firmware versions via crafted HTTP requests targeting IPv6 settings.https://secopssignal.com/news/vulnerabilities/qingteng-host-security-platform-os-command/https://secopssignal.com/news/vulnerabilities/qingteng-host-security-platform-os-command/Wed, 21 Oct 2026 01:26:46 +0000VulnerabilitiesAn authenticated administrator can trigger arbitrary OS commands on client devices through a vulnerability in the Security Toolbox module.https://secopssignal.com/news/vulnerabilities/plex-media-server-arbitrary-file-write-and-ssrf/https://secopssignal.com/news/vulnerabilities/plex-media-server-arbitrary-file-write-and-ssrf/Wed, 21 Oct 2026 00:13:47 +0000VulnerabilitiesFour vulnerabilities in Plex Media Server, including arbitrary file writes, were added to the federal Known Exploited Vulnerabilities catalog on October 20, 2026.https://secopssignal.com/news/vulnerabilities/ffmpeg-null-pointer-dereference-in-libavcodec/https://secopssignal.com/news/vulnerabilities/ffmpeg-null-pointer-dereference-in-libavcodec/Tue, 20 Oct 2026 23:17:02 +0000VulnerabilitiesA NULL pointer dereference in FFmpeg allows attackers to crash the application via crafted media files, posing a high risk to open-source video processing workflows.https://secopssignal.com/news/vulnerabilities/a2a-java-sdk-android-redirect-bug-exposes-custom/https://secopssignal.com/news/vulnerabilities/a2a-java-sdk-android-redirect-bug-exposes-custom/Tue, 20 Oct 2026 21:53:41 +0000VulnerabilitiesA high-severity flaw in the A2A Java SDK for Android allows custom authentication headers to leak during HTTP redirects, exposing credentials to third parties.https://secopssignal.com/news/vulnerabilities/apache-tomcat-jndi-realm-auth-flaw-skips/https://secopssignal.com/news/vulnerabilities/apache-tomcat-jndi-realm-auth-flaw-skips/Tue, 20 Oct 2026 19:32:01 +0000VulnerabilitiesA flaw in Apache Tomcat’s JNDI realm authentication fails to validate credentials for non-GSSAPI SASL mechanisms, allowing potential unauthorized access across multiple major versions.https://secopssignal.com/news/vulnerabilities/apache-tomcat-http-2-async-patch-fixes-cve-2026/https://secopssignal.com/news/vulnerabilities/apache-tomcat-http-2-async-patch-fixes-cve-2026/Tue, 20 Oct 2026 19:20:32 +0000VulnerabilitiesA vulnerability in Apache Tomcat allows mixed HTTP/2 requests between users during asynchronous processing. Affected versions require immediate upgrade to 11.0.27, 10.1.61 or 9.0.123.https://secopssignal.com/news/vulnerabilities/froxlor-symlink-flaw-in-traffic-cron-lets-auth/https://secopssignal.com/news/vulnerabilities/froxlor-symlink-flaw-in-traffic-cron-lets-auth/Tue, 20 Oct 2026 18:12:53 +0000VulnerabilitiesAuthenticated users in Froxlor versions before 2.3.15 can hijack root-owned directories via a symlink vulnerability in the traffic statistics cron job.https://secopssignal.com/news/vulnerabilities/crass-ruby-css-parser-bug-exhausts-server/https://secopssignal.com/news/vulnerabilities/crass-ruby-css-parser-bug-exhausts-server/Tue, 20 Oct 2026 15:26:33 +0000VulnerabilitiesA high-severity vulnerability in the Crass Ruby gem allows attackers to exhaust server resources by injecting crafted CSS strings with unbounded exponentiation.https://secopssignal.com/news/vulnerabilities/lavalite-cms-10-1-2-high-severity-cve-2026-113358/https://secopssignal.com/news/vulnerabilities/lavalite-cms-10-1-2-high-severity-cve-2026-113358/Tue, 20 Oct 2026 11:22:49 +0000VulnerabilitiesAn unauthenticated flaw in LavaLite CMS through version 10.1.2 allows attackers to download private files from local or remote storage.https://secopssignal.com/news/cyber-attacks/mastercard-stablecoin-security-pre-screening-for/https://secopssignal.com/news/cyber-attacks/mastercard-stablecoin-security-pre-screening-for/Tue, 20 Oct 2026 07:17:41 +0000Cyber AttacksNew risk intelligence solution helps banks identify fraud and sanctions indicators before stablecoin payments settle on blockchain networks.https://secopssignal.com/news/cyber-attacks/ftc-warns-senior-fraud-costs-could-hit-119-5b-as/https://secopssignal.com/news/cyber-attacks/ftc-warns-senior-fraud-costs-could-hit-119-5b-as/Tue, 20 Oct 2026 05:08:48 +0000Cyber AttacksInvestment scams and impersonation schemes drive record losses for Americans over 60, with unreported costs potentially exceeding $100 billion.https://secopssignal.com/news/vulnerabilities/pillow-mic-parsing-bug-cve-2026-112390-causes/https://secopssignal.com/news/vulnerabilities/pillow-mic-parsing-bug-cve-2026-112390-causes/Mon, 19 Oct 2026 21:23:21 +0000VulnerabilitiesA flaw in the Python imaging library allows crafted files to hang worker threads, requiring an upgrade to version 13.0.0 for resolution.https://secopssignal.com/news/vulnerabilities/craft-cms-authentication-bypass-allows-account/https://secopssignal.com/news/vulnerabilities/craft-cms-authentication-bypass-allows-account/Mon, 19 Oct 2026 20:26:20 +0000VulnerabilitiesA high-severity flaw in Craft CMS versions prior to 5.11.0 lets attackers reuse email verification codes to reset passwords and seize control of user accounts.https://secopssignal.com/news/vulnerabilities/aiohttp-multipart-flaw-triggers-resource/https://secopssignal.com/news/vulnerabilities/aiohttp-multipart-flaw-triggers-resource/Mon, 19 Oct 2026 17:29:22 +0000VulnerabilitiesUnauthenticated attackers can trigger resource exhaustion in aiohttp versions 2 through 3.14.3 via crafted multipart requests using Request.post().https://secopssignal.com/news/vulnerabilities/crewai-tools-ssrf-vulnerability-in/https://secopssignal.com/news/vulnerabilities/crewai-tools-ssrf-vulnerability-in/Mon, 19 Oct 2026 16:47:15 +0000VulnerabilitiesA server-side request forgery vulnerability in crewai-tools allows attackers to access internal resources via the SeleniumScrapingTool component.https://secopssignal.com/news/vulnerabilities/bearer-cli-sast-ranks-sqli-and-owasp-flaws-by/https://secopssignal.com/news/vulnerabilities/bearer-cli-sast-ranks-sqli-and-owasp-flaws-by/Mon, 19 Oct 2026 06:07:24 +0000VulnerabilitiesThe free static analysis tool ranks flaws by proximity to personal data, helping teams prioritize remediation efforts without executing the source code.https://secopssignal.com/news/vulnerabilities/remote-dos-in-sglang-scheduler-affects-versions/https://secopssignal.com/news/vulnerabilities/remote-dos-in-sglang-scheduler-affects-versions/Mon, 19 Oct 2026 06:07:12 +0000VulnerabilitiesA high-severity flaw in the SGLang scheduler allows remote denial of service attacks on versions through 0.5.19 while a fix awaits acceptance.https://secopssignal.com/news/cyber-attacks/video-conferencing-phishing-invites-spotting-real/https://secopssignal.com/news/cyber-attacks/video-conferencing-phishing-invites-spotting-real/Mon, 19 Oct 2026 05:50:14 +0000Cyber AttacksCalendar invitations from video conferencing platforms carry hidden risks that bypass standard defenses when trusted corporate names are spoofed.https://secopssignal.com/news/threat-intel/dark-web-threat-intelligence-what-it-is-and-how/https://secopssignal.com/news/threat-intel/dark-web-threat-intelligence-what-it-is-and-how/Mon, 19 Oct 2026 05:39:44 +0000Threat IntelligenceHidden forums and illicit marketplaces expose stolen corporate credentials long before attackers deploy them against your network.https://secopssignal.com/news/threat-intel/preventing-data-exposure-seen-by-dark-web/https://secopssignal.com/news/threat-intel/preventing-data-exposure-seen-by-dark-web/Mon, 19 Oct 2026 05:23:20 +0000Threat IntelligenceCommercial monitoring tools alert you to leaked credentials only after the exposure has already occurred somewhere else.https://secopssignal.com/news/malware/semperis-report-ransom-threats-target-employee/https://secopssignal.com/news/malware/semperis-report-ransom-threats-target-employee/Mon, 19 Oct 2026 04:14:31 +0000Malware & RansomwareA new survey reveals that over a third of ransomware victims face threats against their families, forcing some to seek medical care or relocate.https://secopssignal.com/news/cyber-attacks/php-auto-prepend-file-modified-by-ai-scripts-to/https://secopssignal.com/news/cyber-attacks/php-auto-prepend-file-modified-by-ai-scripts-to/Sun, 18 Oct 2026 05:26:44 +0000Cyber AttacksAttackers modified PHP settings to persist on Linux servers and harvest admin credentials during a campaign observed from October 2025 to April 2026.