Nyhetsnavet - säkerhetsflöden

IT-säkerhet och cybersäkerhet i realtid — CVE-varningar, sårbarhetsrapporter, incidenter och hotinformation från NVD, CISA, BleepingComputer och fler SOC-källor.

Senaste 1h Senaste 6h Senaste 24h Senaste 7d Senaste 30d Endast lokalt Analys/ledare Endast följda källor

Sökning: estland / ett / financial Tid: Senaste 6h Rensa filter

1 källa använder cache

Toppnyheter Säkerhet

Dark Reading 37 min

Dark Reading

ClickFix Attacks Evolve to Better Hide Malicious Payloads

Threat actors are now hiding payloads by using DNS TXT records and browser cache pre-fetching, making it tougher to spot early attack stages.

2026-10-06 22:32 37 min

GitHub Security Advisories

CVE-2026-41508: Coraza: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling

2026-10-06 22:37 · 32 min

GitHub Security Advisories

CVE-2026-86540: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

2026-10-06 20:58 · 2 h

Poster

140

Källor

Senast uppdaterad

2026-10-06 23:06

NVD (National Vulnerability Database)10

SecurityWeek Vulnerabilities10

CERT-SE10

CISA KEV-katalog10

CISA Alerts10

Microsoft MSRC10

CVE-toppar

CVE-2026-648925

CVE-2026-1024893

CVE-2026-1024903

CVE-2026-1042863

CVE-2026-765043

Senaste CVE

CVE-2026-41510

GitHub Security Advisories · 2026-10-06 22:38

CVE-2026-41510: Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding

CVE-2026-41508

GitHub Security Advisories · 2026-10-06 22:37

CVE-2026-41508: Coraza: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling

CVE-2026-41504

GitHub Security Advisories · 2026-10-06 22:37

CVE-2026-41504: Coraza: Native audit-log format allows CRLF injection and log forgery via request body and header fields

CVE-2026-86540

GitHub Security Advisories · 2026-10-06 20:58

CVE-2026-86540: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

CVE-2026-21589

BleepingComputer · 2026-10-06 19:34

Atlassian warns of critical file-access flaw in Jira, Confluence

Säkerhet 3 artiklar

GitHub Security Advisories

CVE-2026-41508: Coraza: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling

## Root Cause File: `internal/bodyprocessors/multipart.go` (since commit `3347961b`, PR #1453 *"feat: ignore unexpected EOF in MIME multipart request body processor"*, merged 2026-03-06, first shipped in `v3.4.0`)....

2026-10-06 22:37 32 min

GitHub Security Advisories

Dark Reading

ClickFix Attacks Evolve to Better Hide Malicious Payloads

Threat actors are now hiding payloads by using DNS TXT records and browser cache pre-fetching, making it tougher to spot early attack stages.

2026-10-06 22:32 37 min

Dark Reading

GitHub Security Advisories

CVE-2026-86540: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

## Overview A critical **Arbitrary Code Execution (ACE)** vulnerability exists in the Knowns Language Server Protocol (LSP) detection and startup pipeline. The system blindly trusts the...

2026-10-06 20:58 2 h

GitHub Security Advisories