https://malwarebrief.com/section/vulnerabilities/unreviewed-ai-bug-reports-go-straight-to-opted-in/Malware Briefen2026-10-10T14:33:14ZUnreviewed AI bug reports go straight to opted-in OSS maintainers to speed patchinghttps://malwarebrief.com/section/data-breaches/shinyhunters-suspect-jailed-following-fbi/Malware Briefen2026-10-10T14:32:59ZShinyHunters Suspect Jailed Following FBI Recruitment Portal Breach and Agent Data Thefthttps://malwarebrief.com/section/cyber-attacks/malicious-github-workflows-infect-340/Malware Briefen2026-10-10T14:32:59ZMalicious GitHub Workflows Infect 340 Repositories via Hijacked Maintainer Accountshttps://malwarebrief.com/section/vulnerabilities/orgs-with-falkordb-bolt-endpoint-exposed-face/Malware Briefen2026-10-10T14:32:35ZOrgs with FalkorDB Bolt Endpoint Exposed Face Critical Auth Bypass CVE-2026-107910https://malwarebrief.com/section/vulnerabilities/eduadmin-booking-sql-injection-risk-threatens/Malware Briefen2026-10-10T14:32:35ZEduAdmin Booking SQL Injection Risk Threatens Data Integrity for Institutionshttps://malwarebrief.com/section/vulnerabilities/organizations-urged-to-patch-themerex-lets-play/Malware Briefen2026-10-10T14:32:35ZOrganizations Urged to Patch ThemeREX Let's Play v1.1.15 to Mitigate Critical 9.8 CVSS Deserialization Riskhttps://malwarebrief.com/section/vulnerabilities/organisations-risk-remote-code-execution-via/Malware Briefen2026-10-09T18:42:29ZOrganisations Risk Remote Code Execution via Critical Command Injection in @enmaso/node-convert Libraryhttps://malwarebrief.com/section/vulnerabilities/skyeye-tts-vulnerability-enables-unauth/Malware Briefen2026-10-09T18:42:21ZSkyeye TTS Vulnerability Enables Unauth PowerShell Execution on Windows Servershttps://malwarebrief.com/section/cyber-attacks/organizations-urged-to-check-ssl-certs-after/Malware Briefen2026-10-09T18:40:54ZOrganizations urged to check SSL certs after hackers hijacked .gh, .sl, .as to forge Google HTTPShttps://malwarebrief.com/section/vulnerabilities/open-source-maintainers-receive-automated-ai/Malware Briefen2026-10-09T18:20:38ZOpen-source maintainers receive automated AI vulnerability reports from Anthropic's new free scannerhttps://malwarebrief.com/section/vulnerabilities/critical-unauth-sqli-in-phpnuxbill-freeradius/Malware Briefen2026-10-09T18:20:38ZCritical Unauth SQLi in PHPNuxBill FreeRADIUS Puts Orgs at Risk, Enabling Credential Theft via Blind Injectionhttps://malwarebrief.com/section/vulnerabilities/organisations-urged-to-patch-ibm-guardium-12-1/Malware Briefen2026-10-09T15:03:09ZOrganisations urged to patch IBM Guardium 12.1/12.2.2 to stop unauthenticated container hijack and cluster takeoverhttps://malwarebrief.com/section/vulnerabilities/organisations-urged-to-patch-ibm-guardium-12-0/Malware Briefen2026-10-09T14:41:36ZOrganisations urged to patch IBM Guardium 12.0-12.2 after critical unauthenticated RCE flaw exposedhttps://malwarebrief.com/section/vulnerabilities/ibm-access-software-flaw-lets-attackers-run-code/Malware Briefen2026-10-09T14:29:55ZIBM access software flaw lets attackers run code without credentials, hitting versions up to 10.0.9.2 and 11.0.3https://malwarebrief.com/section/vulnerabilities/service-outages-loom-as-cisa-orders-federal-bind/Malware Briefen2026-10-09T13:08:14ZService Outages Loom as CISA Orders Federal BIND TKEY Fixes by Oct 11https://malwarebrief.com/section/cyber-attacks/asos-customers-face-data-exposure-after-hackers/Malware Briefen2026-10-08T18:22:19ZAsos customers face data exposure after hackers claim full cloud compromisehttps://malwarebrief.com/section/cloud-security/cloudflare-radar-redesign-helps-orgs-access-real/Malware Briefen2026-10-08T18:05:42ZCloudflare Radar Redesign Helps Orgs Access Real-Time Traffic Data Without Technical Skillshttps://malwarebrief.com/section/vulnerabilities/handlebars-rce-flaw-allows-server-compromise-via/Malware Briefen2026-10-08T18:05:42ZHandlebars RCE flaw allows server compromise via prototype bypass