JetBrains warns of critical TeamCity remote code execution flaw
…The security issue is tracked as CVE-2026-63077 and can be leveraged by an attacker with HTTPS access to a TeamCity server to bypass authentication via the agent polling protocol and…
Search
Coca-Cola says Fairlife ransomware attack halts US dairy production
…Securities and Exchange Commission (SEC), Coca-Cola said Fairlife detected unauthorized access to some of its systems, including its production-related systems, in connection with a ransomware attack. "After detecting the issue…
CISA orders feds to patch max severity ColdFusion flaw by Friday
…Adobe issued patches that attackers had begun exploiting CVE-2026-48282 within two hours of Adobe's disclosure, while the Canadian Center for Cyber Security (CCCS) encouraged network defenders to secure their…
HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload
…security alerting thresholds. Although DoS flaws are considered less severe than vulnerabilities that enable data theft or code execution, they can cause operational disruptions and reputational damage. The HollowByte DoS issue has…
Critical RCE flaw in Windows IKE Extension now actively exploited
…Federal Civilian Executive Branch (FCEB) agencies to secure their devices within three days, as mandated by Binding Operational Directive 26-04. "This type of vulnerability is a frequent attack vector for malicious…
DentaQuest data breach exposed info of 2.6 million accounts
…the initial incident, we took immediate action to secure our environment, contain the attack, and mitigate the threat.” “Our systems remain fully operational, and we continue to serve our clients with limited…
Who Vets AI’s Code? The Scale Challenge Facing Open Source Ingestion
…The core issue is velocity, not model accuracy. To secure the development pipeline without sacrificing output, security and platform teams are moving defense left of the IDE: Restrict Direct Registry Fetching: Block…
Ubiquiti patches three max severity UniFi OS vulnerabilities
…UniFi OS is a unified operating system that powers UniFi Consoles and helps manage IT infrastructure, including networking, security, and other services, as well as UniFi applications such as UniFi Network, UniFi…
New GhostLock tool abuses Windows API to block file access
…The researcher says that many security products and behavioral detection systems focus on detecting mass file writes or encryption operations. GhostLock primarily generates large numbers of legitimate file open requests, making it…
Google accidentally exposed details of unfixed Chromium flaw
…The issue impacts all Chromium-based browsers, including Google Chrome, Microsoft Edge, Brave, Opera, Vivaldi, and Arc. Persistent bug On October 26, 2024, a Google developer noticed that the issue was still…