🚨 EUVD-2026-31842

📊 Score: n/a
📅 Updated: 2026-05-26

📝 FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (Network Layer Reachability Information) decoder. The function decode_bgp_subnet_encoding_ipv4_raw() in src/bgp_protocol.cpp reads prefix_bit_length directly from the BGP packet (line 99) without validating it is...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31842

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-31846

📊 Score: n/a
📦 Product: Apache Flink Kubernetes Operator
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-05-26

📝 Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator.

The FlinkSessionJob jarURI is currently not validated so that it points to user-owned fil...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31846

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-31839

📊 Score: n/a
📅 Updated: 2026-05-26

📝 FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read vulnerability in the NetFlow v9 data flowset processor. In src/netflow_plugin/netflow_v9_collector.cpp, the Data template branch (lines 1695-1702) iterates over flow records without performing a per-iteration bounds check against the pa...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31839

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-31838

📊 Score: n/a
📅 Updated: 2026-05-26

📝 An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-level permissions (User or Guest) to retrieve sensitive information, such as the Owner's unique identifier (ID) ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31838

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-203462

📊 Score: 5.0/10 (CVSS v3.1)
📦 Product: weblate
🏢 Vendor: WeblateOrg
📅 Updated: 2026-05-26

📝 Weblate has a Server-Side Request Forgery issue

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-203462

#cybersecurity #infosec #euvd #cve #vulnerability

The Oncology Institute Confirms Patient Data Exposure in Third-Party Breach

The Oncology Institute confirmed that a long-term breach at a third-party software vendor, exposed the sensitive personal and health insurance information of its patients.

****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/the-oncology-institute-confirms-patient-data-exposure-in-third-party-breach-m-g-u-5-7/gD2P6Ple2L

Make room for even more retro games with this Android compression tool for emulators

Stop wasting storage on ISOs: CHDroid converts your retro games to compressed CHD files.

https://www.androidauthority.com/emulation-compression-3671068/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Jony Ive’s Ferrari looks nothing like a Ferrari

Ferrari makes some of the fastest cars on the planet, so it's anyone's guess how the Italian automaker ended up being so incredibly late to the EV party. Long after most automakers have drastically scaled back their EV …

https://www.theverge.com/transportation/937077/ferrari-luce-ev-apple-car-jony-ive-design

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

Void Dokkaebi evolve InvisibleFerret: il malware nordcoreano ora usa Cython per sfuggire agli antivirus
#CyberSecurity
https://insicurezzadigitale.com/void-dokkaebi-evolve-invisibleferret-il-malware-nordcoreano-ora-usa-cython-per-sfuggire-agli-antivirus/

Possible Phishing 🎣
on: ⚠️hxxps[:]//usalall11[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a15bd4b3b77500008c7efb9
#cybersecurity #phishing #infosec #urldna #scam #infosec

BNP Paribas works with Mistral on a European answer to Anthropic’s Mythos

Locked out of the most powerful #AI cybersecurity model in production, the eurozone’s biggest bank is helping build its own.

https://thenextweb.com/news/bnp-paribas-mistral-mythos-rival-sovereign-ai

#FinTech #FinServ #Banking #CyberSecurity

#LaravelLang packages hijacked to deploy credential-stealing #malware

https://www.bleepingcomputer.com/news/security/laravel-lang-packages-hijacked-to-deploy-credential-stealing-malware/

#cybersecurity #Laravel

Spotify wants to replace your reading list with narrated magazine articles

Spotify adds over 650 narrated articles, and they eat your premium audiobook allowance.

https://www.androidauthority.com/spotify-launches-articles-feature-3671209/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

⚠️ May 2026 attacks showed one clear pattern: routine business actions became attack paths.

Fake invitations, #AgentTesla, BlobPhish, OTP #phishing and RMM abuse all exposed gaps in SOC visibility.

See how to speed up triage against them 👇
https://any.run/cybersecurity-blog/major-cyber-attacks-may-2026/?utm_source=mastodon&utm_medium=post&utm_campaign=major_cyber_attacks_may_2026&utm_content=linktoblog&utm_term=260526

#cybersecurity #infosec

Possible Phishing 🎣
on: ⚠️hxxps[:]//eroplcmnfuei[.]weebly[.]com/
🧬 Analysis at: https://urldna.io/scan/6a14f86e3b77500004730032
#cybersecurity #phishing #infosec #urldna #scam #infosec

Retroid Pocket 5 owners report that their handhelds are cracking

Is your Retroid Pocket 5 cracked? You aren't alone at all.

https://www.androidauthority.com/retroid-pocket-5-cracked-handheld-3670942/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Exposing Critical Vulnerabilities in CBSE's On-Screen Marking Portal

https://ni5arga.com/blog/posts/hacking-cbse/

#HackerNews #vulnerabilities #CBSE #cybersecurity #hacking #education #technology

AI warfare is already here

The Convention on Certain Conventional Weapons, an international forum that focuses on lethal autonomous systems, is hosted twice a year at the United Nations in Geneva. When Branka Marijan attended in November 2017, sh…

https://www.theverge.com/ai-artificial-intelligence/937028/military-ai-warfare-red-lines

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

Possible Phishing 🎣
on: ⚠️hxxps[:]//bit[.]ly/3LlHjE9
🧬 Analysis at: https://urldna.io/scan/6a1585113b77500008c7e810
#cybersecurity #phishing #infosec #urldna #scam #infosec

Nobody wants to tell me why they only listen to their own Suno slop

Do you even like art? | Image: Cath Virginia / The Verge, Getty Images There's this alarming trend in the Suno subreddit. People aren't just prompting AI songs; they're sitting around listening almost exclusively to the…

https://www.theverge.com/ai-artificial-intelligence/937059/nobody-wants-to-tell-me-why-they-only-listen-their-own-suno-slop

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

The Flipper One is the Linux cyberdeck I wish my Raspberry Pi could be

If you love your Flipper Zero, you're really going to dig the new Flipper On, which runs on Linux and can do so much more.

https://www.zdnet.com/article/flipper-one-cyberdesk-raspberry-pi-alternative/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

Possible Phishing 🎣
on: ⚠️hxxps[:]//merenciano[.]net/serviciodecorreo/login/
🧬 Analysis at: https://urldna.io/scan/6a1593223b77500008c7e9bd
#cybersecurity #phishing #infosec #urldna #scam #infosec

Apple’s historic all-iPhone 17 Pro MLS broadcast is drawing criticism from sports fans

While the smartphone setup brought dynamic close-ups to the match, viewers complained about compression and more.

https://www.androidauthority.com/apple-iphone-17-pro-mls-match-broadcast-3670984/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Possible Phishing 🎣
on: ⚠️hxxps[:]//temp-owkexuorwkyoibanumaq[.]webadorsite[.]com/
🧬 Analysis at: https://urldna.io/scan/6a14f0b83b7750000472ff7a
#cybersecurity #phishing #infosec #urldna #scam #infosec

Google Wallet’s new UI is making some users miss the old one

Google Wallet's new UI is dividing users over hidden passes, extra taps, and a slower rollout.

https://www.androidauthority.com/google-wallet-redesign-users-divided-3670879/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

⚠️ Lazarus keeps RemotePE off the filesystem #RemotePE runs entirely in memory after DPAPILoader and RemotePELoader, leaving no disk artifact while targeting finance and #crypto firms. 🔗 read more: thehackernews.com/2026/05/laza... #ransomNews #cybersecurity

These are the first Android XR audio glasses, coming this fall with iPhone support

At I/O 2026, Google had a number of Android XR announcements, including a sneak peek at the first two audio-only Samsung glasses with designs from Gentle Monster and Warby Parker. more…

https://9to5google.com/2026/05/19/android-xr-audio-glasses/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Google [9to5Google]

Possible Phishing 🎣
on: ⚠️hxxps[:]//onur156[.]github[.]io/instagram-phishing-tool
🧬 Analysis at: https://urldna.io/scan/6a14f87a3b77500004730043
#cybersecurity #phishing #infosec #urldna #scam #infosec

🚨 EUVD-2026-31801

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Mayosis Core
🏢 Vendor: TeconceTheme
📅 Updated: 2026-05-26

📝 Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Mayosis Core: from n/a through 5.4.7.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31801

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-31800

📊 Score: 8.7/10 (CVSS v3.1)
📦 Product: CODESYS Control RTE (SL), CODESYS Virtual Control SL, CODESYS Control Win (SL) (+13 more)
🏢 Vendor: CODESYS
📅 Updated: 2026-05-26

📝 The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31800

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-31799

📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: CODESYS Control Win (SL), CODESYS Control for PLCnext SL, CODESYS Control for Linux ARM SL (+13 more)
🏢 Vendor: CODESYS
📅 Updated: 2026-05-26

📝 The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability t...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31799

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-31797

📊 Score: 8.5/10 (CVSS v3.1)
📦 Product: CODESYS Development System
🏢 Vendor: CODESYS
📅 Updated: 2026-05-26

📝 The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation. A low-privileged local attacker can exploit a TOCTOU race condition with a practical time wind...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31797

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-31798

📊 Score: 8.5/10 (CVSS v3.1)
📦 Product: CODESYS Development System
🏢 Vendor: CODESYS
📅 Updated: 2026-05-26

📝 The affected product creates a directory with insecure default permissions during administrative installation. This allows a low-privileged local attacker to modify a temporary file defining the components to be installed, enabling local p...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31798

#cybersecurity #infosec #euvd #cve #vulnerability

12 pioneering phones that launched ahead of their time

From gesture navigation to foldables, these devices shaped the future of smartphones as it stands today.

https://www.androidauthority.com/pioneering-phones-ahead-of-their-time-3664000/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]