🚨 EUVD-2026-38277

📊 Score: 8.1/10 (CVSS v3.1)
📦 Product: Storage Protect Client, Storage Protect Snapshot For Windows
🏢 Vendor: IBM
📅 Updated: 2026-06-22

📝 IBM Storage Protect Client 8.1.0.0 through 8.2.1.0 and IBM Storage Protect Snapshot For Windows 8.1.0.0 through 8.2.1.0 could allow a remote attacker to bypass authentication due to the use of a hardcoded cred...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38277

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-38276

📊 Score: 3.8/10 (CVSS v3.1)
📦 Product: Mattermost, Mattermost
🏢 Vendor: Mattermost
📅 Updated: 2026-06-22

📝 Mattermost versions 11.7.x <= 11.7.0, 10.11.x <= 10.11.17 fail to validate bot targets when demoting users to guests which allows a lower-privileged administrator to degrade arbitrary bot accounts via the standard demote-user API.. Mattermo...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38276

#cybersecurity #infosec #euvd #cve #vulnerability

Patreon CEO Jack Conte on supporting artists in the AI slop era

Today, I’m talking with Jack Conte, the CEO of Patreon. Jack last joined me on the show almost exactly five years ago, in the summer of 2021, and a lot has changed on the internet and in the creator landscape since then…

https://www.theverge.com/podcast/952607/patreon-ceo-jack-conte

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

# Cybersecurity for the paranoid business traveller

A great, practical blogpost, by @Edent, for people who are not James Bond.

https://shkspr.mobi/blog/2026/06/cybersecurity-for-the-paranoid-business-traveller/

#cybersecurity

Apple’s latest AirTags are cheaper than ever for Prime Day

It’s a small but rare discount. | Photo by Amelia Holowaty Krales / The Verge Prime Day has brought a number of Apple deals, but one of the most useful if you’re planning to travel over the July 4th weekend or later thi…

https://www.theverge.com/gadgets/951987/apple-airtag-second-gen-prime-day-deal-sale-2026

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

Possible Phishing 🎣
on: ⚠️hxxps[:]//office365-service-c38bf0[.]webflow[.]io
🧬 Analysis at: https://urldna.io/scan/6a38f3613b7750000239106f
#cybersecurity #phishing #infosec #urldna #scam #infosec

AMD releases FSR 4.1 upscaling for older graphics cards

Assassin’s Creed Black Flag Resynced will have support for FSR 4.1 on day one. AMD is officially launching FSR Upscaling 4.1 for Radeon RX 7000-series GPUs today. The update means that computers with those older graphic…

https://www.theverge.com/news/953664/amd-fsr-4-1-upscaling-rx-7000-series-gpus-rdna-3

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

Robots at work: warehouses, factories, and logistics #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/robots-at-work-warehouses-factories-and-logistics/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

Lekcja prywatności z Poznania. Czego uczy nas "afera" wokół Pyrkonu?

W sieci zawrzało po wycinku z posiedzenia poznańskich urzędników. Zamiast jednak robić wir w szklance wody, warto spojrzeć na chłodne fakty.

Prawdziwym źródłem danych dla brokerów informacji nie są urzędy miast, ale smartfony, które codziennie nosimy w kieszeniach, a dokładniej oprogramowanie, które sami na nich instalujemy.

Zamiast liczyć na to, że obroni nas RODO, musimy wziąć sprawy we własne ręce. W artykule opisuję jak działają mechanizmy śledzenia, dlaczego oddajemy prywatność za zniżki u operatorów i jak za pomocą narzędzi takich jak @exodus odzyskać kontrolę nad telefonem.

Cały artykuł: 👇
https://eteryu.space/lekcja-prywatnosci-z-poznania-czego-uczy-nas-afera-woko-pyrkonu/

#Pyrkon #Poznań #Prywatność #Privacy #Cybersecurity #Bezpieczeństwo #HigienaCyfrowa #ExodusPrivacy #Android #iOS #FOSS #Inwigilacja #MastodonPL

Alt...

Screen z video udostępnionego przez Autorów.

🚨 EUVD-2026-38225

📊 Score: 9.4/10 (CVSS v3.1)
📦 Product: MISP
🏢 Vendor: MISP
📅 Updated: 2026-06-22

📝 Multiple MISP core controllers and model capture paths accepted client-controlled request fields such as primary keys (id) and ownership/scope foreign keys (event_id, org_id, user_id, sharing_group_id, galaxy_cluster_uuid, organisation_uuid, and related nested obj...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38225

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-38224

📊 Score: n/a
📦 Product: Net::Statsite::Client
🏢 Vendor: JASEI
📅 Updated: 2026-06-22

📝 Net::Statsite::Client versions through 1.1.0 for Perl allow metric injections.

Net::Statsite::Client is a client for the statsite protocol, which is a variant of statsd.

Newlines are not removed from metric names, allowing metric injections.

Values are not s...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38224

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxps[:]//doctorssserver[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a38ad123b77500005326e25
#cybersecurity #phishing #infosec #urldna #scam #infosec

Massive breach spills credentials for thousands of sensitive networks

Researchers have uncovered a massive breach of Fortinet firewalls that has given Russian-speaking attackers near-unrestricted access to some of the world’s largest and most powerful organizations, including Oracle, Chevron, Lenovo, Federal Express, a NATO defense contractor, and Fortinet itself.

#Fortinet #databreach #security #cybersecurity #hackers #hacking #hacked

https://arstechnica.com/security/2026/06/massive-breach-spills-credentials-for-thousands-of-sensitive-networks/

Nothing just designed its most wanted phone ever, but it isn’t for sale

This Nothing phone's got everything.

https://www.androidauthority.com/nothing-dream-phone-3679885/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Lunary-ai: 69 CVEs, 18 critical, avg CVSS 7.69. 100% unpatched. Trust Score: D. AI monitoring tool needs patching NOW. #LunaryAI #infosec #cybersecurity

https://www.valtersit.com/vendors/lunary-ai/

Oracle PeopleSoft Zero-Day: ShinyHunters Targets Higher Education https://deafnews.it/en/article/oracle-peoplesoft-zero-day-shinyhunters-targets-higher-education #Cybersecurity

The Galaxy S27 Pro could inherit one of the Ultra’s best display features

Samsung might finally stop gatekeeping its best screen tech.

https://www.androidauthority.com/samsung-galaxy-s27-pro-privacy-display-rumor-3679907/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Firefox KI-Funktion ermöglichte E-Mail-Diebstahl per Prompt-Injection

Ein manipulierter Seitentitel reichte aus, um den KI-Assistenten in Firefox dazu zu bringen, E-Mail-Daten auszulesen und an einen Angreifer zu übermitteln – ohne sichtbares Zutun des Nutzers.

https://www.all-about-security.de/firefox-ki-funktion-ermoeglichte-e-mail-diebstahl-per-prompt-injection/

#cybersecurity #itsecurity #firefox

🚨New ransom group blog post!🚨

Group name: qilin
Post title: Central Bank of Libya
Info: https://cti.fyi/groups/qilin.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

Possible Phishing 🎣
on: ⚠️hxxps[:]//wewewecodesadwewesadwe[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a38bb223b77500005326f75
#cybersecurity #phishing #infosec #urldna #scam #infosec

#AryStinger #botnet infected thousands of #DLink routers worldwide

https://www.bleepingcomputer.com/news/security/arystinger-botnet-infected-thousands-of-d-link-routers-worldwide/

#cybersecurity

Wyze’s new smart scale can break down your body composition for less than $80

Seven months after introducing its $119.98 Ultra BodyScan smart scale, Wyze announced a cheaper $79.98 alternative available today that makes a few compromises to shave $40 off the price. There's no Wi-Fi, but you can s…

https://www.theverge.com/tech/952512/wyze-smart-scale-bodyscan-electrodes-handle-body-composition

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

WhatsApp's "End-to-End Encryption" Is the Biggest Lie in Tech History

https://medium.com/%400xaxgb/whatsapps-e2e-encryption-is-the-biggest-lie-in-tech-history-and-i-can-prove-it-mathematically-46ebdffeb319

#HackerNews #WhatsApp #EndToEndEncryption #TechLies #PrivacyConcerns #Cybersecurity

🚨 EUVD-2025-210296

📊 Score: n/a
📦 Product: Apache Atlas
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-06-22

📝 An authenticated user can perform XSS.

This issue affects Apache Atlas versions 2.4.0 and earlier.

Users are recommended to upgrade to version 2.5.0, which fixes the issue.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210296

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-38219

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Apache NiFi
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-06-22

📝 Apache NiFi 1.12.0 through 2.9.0 are missing authorization when replacing Process Groups that include extension components with specific Required Permissions based on the Restricted annotation. The Restricted annotation indicates addit...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38219

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-38218

📊 Score: 2.3/10 (CVSS v3.1)
📦 Product: Apache NiFi
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-06-22

📝 Authorization handling for component configuration verification requests in Apache NiFi 1.15.0 through 2.9.0 allows clients with read access to submit proposed configuration properties. The proposed properties override current configur...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38218

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-38217

📊 Score: 5.2/10 (CVSS v3.1)
📦 Product: Apache NiFi
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-06-22

📝 Improper escaping of database table names in the CaptureChangeMySQL Processor included with Apache NiFi 1.2.0 through 2.9.0 allows for injecting SQL commands using crafted naming. Manual quoted boundaries added in Apache NiFi 1.8.0 nar...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38217

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-38216

📊 Score: 6.3/10 (CVSS v3.1)
📦 Product: Apache NiFi
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-06-22

📝 Apache NiFi 0.0.1 through 2.9.0 support building qualified URLs from one of several HTTP request headers that provide an alternative to the standard Host header without validating the values provided. Apache NiFi 1.6.0 introduced a con...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38216

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-210295

📊 Score: n/a
📦 Product: Apache Doris MCP Server
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-06-22

📝 Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query path. A user-controlled database name is directly interpolated into a SQL query, and the query is executed without passing the caller's authorization con...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210295

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxp[:]//facebook-clone-kappa-ten[.]vercel[.]app
🧬 Analysis at: https://urldna.io/scan/6a38f35d3b7750000532758e
#cybersecurity #phishing #infosec #urldna #scam #infosec

🛃 After Recent AUR Security Scare, Yay 13.0 Adds New Review and Automation Features https://linuxiac.com/yay-13-0-adds-new-review-and-automation-features/

#AURpocalypse #aur #arch #opensource #cybersecurity

libssh2 Vulnerabilities Enable Remote Code Execution and Denial of Service

libssh2 disclosed two vulnerabilities, including a critical out-of-bounds write (CVE-2026-55200) and a high-severity denial of service (CVE-2026-55199), affecting versions up to 1.11.1. These flaws allow malicious servers to execute code on connecting clients or cause resource exhaustion.

**Plan to update libssh2 to a patched build as soon as a fixed release is available. In the meantime audit your tools (curl/libcurl, PHP ssh2 extension, monitoring utilities, IoT firmware) for the vulnerable library versions up to 1.11.1. Only connect to SSH servers you trust and isolate sensitive management interfaces so they're reachable from trusted networks only, since a malicious server can now attack your client.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/libssh2-vulnerabilities-enable-remote-code-execution-and-denial-of-service-k-v-c-g-d/gD2P6Ple2L

🎣 Phishing Spotlight

Active phishing domain detected in the wild:
mail[.]my-iapple-lost[.]us

🔗 https://beesint.com/pulse/b58e3a00-db4f-449e-beb3-1bb663b78b49

#OSINT #Phishing #ThreatIntel #CyberSecurity

What’s new in Android’s June 2026 Google System Updates: WhatsApp backups

The monthly “Google System Release Notes” primarily detail what’s new in Play services, Play Store, and Play system update across Android phones/tablets, Wear OS, Google/Android TV, Auto, and PC. Some features apply to …

https://9to5google.com/2026/06/15/june-2026-google-system-updates/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Google [9to5Google]

ClawHub: 23 AI Plugins Under Official Scopes, Unauthorized Accounts https://deafnews.it/en/article/clawhub-23-ai-plugins-under-official-scopes-unauthorized-accounts #Cybersecurity

I gamed on 2026’s best Snapdragon and Exynos flagship phones — and the benchmarks lied

Exynos vs Snapdragon vs Tensor vs Dimensity go head to head in real games

https://www.androidauthority.com/snapdragon-vs-exynos-gaming-test-2026-3677839/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

🚨Attention Crypto Users🚨 Microsoft warns of a new threat! CryptoBandits malware is lurking around, spreading through USB shortcuts to steal your seed phrases and wallet addresses. Make sure you're protecting your assets. Know more about how it works. #CryptoNews #CyberSecurity #CryptoBandits #StayAwareStaySafe💻🔒💰 CryptoBandits Malware Uses USB Drives to Steal Crypto Wallets
https://www.squaredtech.co/cryptobandits-malware-uses-usb-drives-to-steal-crypto-wallets?fsp_sid=13375

Possible Phishing 🎣
on: ⚠️hxxps[:]//login[.]steampowered[.]com[.]ru
🧬 Analysis at: https://urldna.io/scan/6a38f36a3b775000053275a3
#cybersecurity #phishing #infosec #urldna #scam #infosec

Survey says Google could be making a huge mistake with its smart home product line

Only 2% of respondents are committed to upgrading to the new Home Speaker.

https://www.androidauthority.com/google-killing-nest-mini-poll-results-3679747/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]