🚨 EUVD-2026-32022

📊 Score: n/a
📦 Product: Crypt::ScryptKDF
🏢 Vendor: MIK
📅 Updated: 2026-05-26

📝 Crypt::ScryptKDF versions through 0.010 for Perl uses insecure random number source when no CSPRNG module is available.

The random_bytes function fell back to using the built-in rand() function when none of the Perl modules Crypt::PRNG, Crypt::OpenSSL::Random, Net::S...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32022

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-32021

📊 Score: n/a
📦 Product: Mojolicious::Plugin::Statsd
🏢 Vendor: RRWO
📅 Updated: 2026-05-26

📝 Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections.

The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.

Version...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32021

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxps[:]//instagram-login-clone[.]vercel[.]app
🧬 Analysis at: https://urldna.io/scan/6a16260a3b77500009aced5f
#cybersecurity #phishing #infosec #urldna #scam #infosec

Critical Vulnerability in KnowledgeDeliver LMS Has Been Patched

A zero-day (CVE-2026-5426) in KnowledgeDeliver LMS is being actively exploited due to reused ASP.NET machine keys.

Pulse ID: 6a164033c76e927d4afb9278
Pulse Link: https://otx.alienvault.com/pulse/6a164033c76e927d4afb9278
Pulse Author: cryptocti
Created: 2026-05-27 00:52:03

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #Edge #InfoSec #Mac #NET #OTX #OpenThreatExchange #Vulnerability #ZeroDay #bot #cryptocti

Bash vs. Fish? I've tried both Linux shells, and one makes using the command line much easier

Replacing your current Linux shell with something way more user-friendly is a lot easier than you think. Let's go Fish!

https://www.zdnet.com/article/bash-vs-fish-which-linux-shells-makes-using-the-command-line-easier/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

Angry TSMC employees considering strikes, unionization over employee bonuses, report claims — company reportedly considering 15% payout cut to fund capex despite record revenues fuelled by AI surge

TSMC responded by saying it expects employee profit-sharing bonuses to grow at a faster rate in 2026 than they did in 2025.

https://www.tomshardware.com/tech-industry/tsmc-employees-threaten-samsung-style-strike-over-rumored-15-percent-bonus-cuts-despite-record-profits

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

🚨New ransom group blog post!🚨

Group name: spacebears
Post title: Gestordes
Info: https://cti.fyi/groups/spacebears.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

Possible Phishing 🎣
on: ⚠️hxxps[:]//asmails[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a15fbcd3b77500004eac591
#cybersecurity #phishing #infosec #urldna #scam #infosec

MiniUpdate RAT Espionage Campaign Using Azure-Hosted C2 Domains

An Iran-linked campaign used MiniUpdate RAT and MiniJunk V2 malware to
target technology professionals using fake recruitment and software lures.

Pulse ID: 6a16441bbe11e6982080d84c
Pulse Link: https://otx.alienvault.com/pulse/6a16441bbe11e6982080d84c
Pulse Author: cryptocti
Created: 2026-05-27 01:08:43

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Azure #CyberSecurity #Espionage #InfoSec #Iran #Malware #OTX #OpenThreatExchange #RAT #bot #cryptocti

Uber chief warns no link yet between AI tokenmaxxing and shipping successful products — company pumps the brakes on all-out AI spending

Uber might be having a serious rethink about lavishing cash on AI services as management still can't draw a clear link between LLM use and beneficial results.

https://www.tomshardware.com/tech-industry/artificial-intelligence/uber-chief-warns-no-link-yet-between-ai-tokenmaxxing-and-shipping-successful-products-company-pumps-the-brakes-on-all-out-ai-spending

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Thanks for hanging out and listening to the cybersecurity rants and Linux love! Always appreciate the chill vibes. ✌️ #Cybersecurity #Linux

Thanks for hanging out and listening to the cybersecurity rants and Linux talk! Always appreciate the chill vibes. ✌️ #Cybersecurity #Linux

Thanks for hanging out and listening to the cybersecurity rants and Linux chatter! Always appreciate the chill vibes. 🤘 #Cybersecurity #Linux

Fresh off B Sides! 🤯

Catch the cybersecurity rants, gaming, and Linux tinkering. A restart stream to unwind and share what I learned. Let's build something cool and chill out. 🎮

#Cybersecurity #Linux #Gaming

https://twitch.tv/chiefgyk3d

Alt...

🔴 LIVE • 2 viewers • Just Chatting

Fresh off B Sides! 🤯

Catch the recap – cybersecurity rants, gaming, and some Linux tinkering. It's a restart stream, so expect the chaos. 🎮 Let's build something interesting (or just chill).

Come hang out!

#Cybersecurity #Linux #Gaming

https://youtube.com/@chiefgyk3d/live

Alt...

🔴 LIVE • 5 viewers

Fresh off B Sides! 🤯

Catch the recap – cybersecurity rants, gaming, and Linux tinkering. A little bit of everything after a busy conference. 🎮

Come chill and watch the chaos unfold. Let’s build something interesting! 🔴

#Cybersecurity #Linux #Gaming

https://kick.com/chiefgyk3d

Alt...

🔴 LIVE • 1 viewers • Just Chatting

🚨 EUVD-2026-31966

📊 Score: 4.3/10 (CVSS v3.1)
📦 Product: Tiktok Feed
🏢 Vendor: bPlugins
📅 Updated: 2026-05-26

📝 Missing Authorization vulnerability in bPlugins Tiktok Feed allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Tiktok Feed: from n/a through 1.0.24.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31966

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-31965

📊 Score: 5.9/10 (CVSS v3.1)
📦 Product: snipe-it
🏢 Vendor: grokability
📅 Updated: 2026-05-26

📝 Snipe-IT is an IT asset/license management system. Prior to 8.4.1, an open redirect vulnerability in Snipe-IT allows attackers to redirect users to malicious sites via unvalidated HTTP Referer header stored in session variable. This vulnerability is fix...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31965

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-31964

📊 Score: 4.3/10 (CVSS v3.1)
📦 Product: WpBookingly
🏢 Vendor: Magepeople inc.
📅 Updated: 2026-05-26

📝 Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects WpBookingly: from n/a through 1.2.9.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31964

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxp[:]//webuyworkshopequipment[.]com/wp-content/themes/sketch/js/SF_TRASH/c45b222914e3c78d
🧬 Analysis at: https://urldna.io/scan/6a15a13b3b77500008c7ebe0
#cybersecurity #phishing #infosec #urldna #scam #infosec

🚨 EUVD-2026-31963

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: Student Transcript Processing System
🏢 Vendor: itsourcecode
📅 Updated: 2026-05-26

📝 A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. This issue affects some unknown processing of the file /admin/modules/class/index.php?view=view. The manipulation of the argument ID le...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31963

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-31962

📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: snipe-it
🏢 Vendor: grokability
📅 Updated: 2026-05-26

📝 Snipe-IT is an IT asset/license management system. Prior to 8.4.1, aAn authenticated user with only users.edit permission can escalate their own privileges to admin by sending a PATCH request to /api/v1/users/{id} with permissions[admin]=1. The API cont...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31962

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-31961

📊 Score: 6.3/10 (CVSS v3.1)
📦 Product: WpTravelly
🏢 Vendor: Magepeople inc.
📅 Updated: 2026-05-26

📝 Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects WpTravelly: from n/a through 2.1.5.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31961

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-31960

📊 Score: 4.8/10 (CVSS v3.1)
📦 Product: snipe-it
🏢 Vendor: grokability
📅 Updated: 2026-05-26

📝 Snipe-IT is an IT asset/license management system. Prior to 8.4.1, users with component view access could be impacted by an unescaped notes column, resulting in cross-site scripting (XSS). This vulnerability is fixed in 8.4.1.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31960

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-31959

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: Student Transcript Processing System
🏢 Vendor: itsourcecode
📅 Updated: 2026-05-26

📝 A flaw has been found in itsourcecode Student Transcript Processing System 1.0. This vulnerability affects unknown code of the file /admin/modules/student/trans.php. Executing a manipulation of the argument studentId/cid can...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31959

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-31958

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: Student Transcript Processing System
🏢 Vendor: itsourcecode
📅 Updated: 2026-05-26

📝 A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0. This affects an unknown part of the file /admin/modules/student/index.php?view=view. Performing a manipulation of the argument studentId ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31958

#cybersecurity #infosec #euvd #cve #vulnerability

"Ghost hackers: the cybersecurity mystery that nobody has solved"

"A shadowy group that stole and dumped the NSA’s most powerful hacking tools still has implications for how companies think about digital risk today."

https://techcrunch.com/2026/05/26/ghost-hackers-the-cybersecurity-mystery-that-nobody-has-solved/

#Cybersecurity

Complaint lodged with Canada's privacy commissioner over Australian court breach
By Heidi Davoren

Litigants in at least 146 court matters were potentially involved in a data breach that is now the subject of a formal complaint with the privacy commissioner in Canada, Senate estimates has been told.

https://www.abc.net.au/news/2026-05-27/viq-solutions-privacy-breach-contract-extension/106722674

#Courts #FamilyLaw #CyberSecurity #HeidiDavoren

Google Health is here, but a lot of people want their Fitbit app back instead

The Fitbit app is no more. Along with the launch of the new Fitbit Air (which you can expect a full review of once we've spent more time with it), Google has officially replaced it with Google Health, as previously anno…

https://www.theverge.com/gadgets/937534/google-health-fitbit-app-ai

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

Master OTW analyzes how Ukraine leveraged drones, cyber warfare, AI-assisted targeting, and electronic warfare to shift the balance of power in the Russia-Ukraine conflict.

Full podcast
https://hackers-arise.com/podcast/the-future-of-warfare/
#cybersecurity #podcast

NotebookLM just made it easier to keep your sources up to date

NotebookLM is taking the manual effort out of re-syncing files.

https://www.androidauthority.com/notebooklm-auto-google-drive-syncing-3671289/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Possible Phishing 🎣
on: ⚠️hxxps[:]//courierguyzarr[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a16039b3b77500009ace914
#cybersecurity #phishing #infosec #urldna #scam #infosec

I wore Google's Fitbit Air for a week, and it gives the Whoop a serious run for its money

The hottest health-tracking device is hidden inside a slick fitness band.

https://www.zdnet.com/article/google-fitbit-air-review/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

#Texas AG sues #Meta over claims that #WhatsApp doesn’t provide end-to-end #encryption

https://arstechnica.com/security/2026/05/texas-ag-sues-meta-over-claims-that-whatsapp-doesnt-provide-end-to-end-encryption/

#cybersecurity #privacy #E2EE

Colorado exempted open-source operating systems from 2028 OS-level age-verification rules, shielding Linux installs from mandatory checks. 🔓
California may add similar language before rollout, while Linux OEMs warn account-age mandates could pressure smaller vendors and user privacy. 🐧

🔗 https://fossforce.com/2026/05/the-quiet-clause-that-may-save-linux-from-age-verification-laws/

#TechNews #Linux #OpenSource #Privacy #AgeVerification #System76 #FOSS #GNU #Security #Surveillance #DigitalRights #Cybersecurity #DataPrivacy #Tech #Colorado #California #USA #Freedom

🚨 EUVD-2026-31849

📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: e107
🏢 Vendor: e107inc
📅 Updated: 2026-05-26

📝 e107 is a content management system (CMS). Prior to 2.3.4, a Broken Access Control vulnerability exists in the application, allowing an unauthorized authenticated user to edit comments posted by others. This stems from inadequate server-side access control vali...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31849

#cybersecurity #infosec #euvd #cve #vulnerability

#Linux #Kernel Flaw Lets Unprivileged Users Access Root-Only Files, Execute Arbitrary Commands as Root

https://linux.slashdot.org/story/26/05/23/0727241/linux-kernel-flaw-lets-unprivileged-users-access-root-only-files-execute-arbitrary-commands-as-root

#cybersecurity #FOSS

🚨 EUVD-2026-31848

📊 Score: 7.8/10 (CVSS v3.1)
📦 Product: Genetec Inter-System Gateway, Genetec Industrial IoT, Genetec Mission Control (+5 more)
🏢 Vendor: Genetec Inc.
📅 Updated: 2026-05-26

📝 A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31848

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-31847

📊 Score: 4.3/10 (CVSS v3.1)
📦 Product: e107
🏢 Vendor: e107inc
📅 Updated: 2026-05-26

📝 e107 is a content management system (CMS). Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a remote location" in "Media Manager" on the administrator screen. This vulnerability ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31847

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-31843

📊 Score: n/a
📅 Updated: 2026-05-26

📝 FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper router integration plugin. The _log() function in src/juniper_plugin/fastnetmon_juniper.php (lines 117-118) constructs shell commands by concatenating the $msg parameter directly into exec() calls: exec("e...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31843

#cybersecurity #infosec #euvd #cve #vulnerability