News
-
Next.js patches conditional code-execution flaws and Server Actions denial of service
Next.js fixes two critical remote-code-execution issues affecting particular caching and SVG processing paths, alongside a separate denial-of-service flaw in App Router Server Actions.
-
Commons committee opens long-term inquiry into AI safety and security governance
MPs will scrutinise AI safety testing, incident reporting and company accountability through a continuing parliamentary inquiry, including the relationship to proposed cyber resilience rules.
-
NCSC updates TLS guidance for post-quantum key establishment
The UK’s NCSC now recommends hybrid and pure post-quantum options for TLS 1.3, urging early deployment for high-priority data in transit while warning older TLS versions cannot be upgraded.
-
Infoblox attributes Help TDS scam-routing infrastructure to Hotejka
Infoblox researchers identify an Eastern European operation behind a long-running traffic distribution system that uses disposable Cloudflare Pages sites to route users into remote-access fraud.
-
Nextcloud built-in CODE proxy flaw exposes installations when local service is down
Collabora reports a critical unauthenticated command-injection flaw in the optional Nextcloud richdocumentscode app when its local CODE service is not running. Version 26.4.303 contains the fix.
-
Cisco Secure Email Gateway flaw is exploited as CERT-EU urges emergency fixes
Cisco confirms exploitation of a critical Secure Email Gateway vulnerability that can allow remote, unauthenticated file writes and root-level execution in affected appliances.
-
French supermarket refrigeration attacks put cyber insurance stock cover under scrutiny
Reuters reports that spoiled stock from French refrigeration attacks may fall outside conventional cyber insurance, depending on individual policy terms, maintenance obligations and specialist extensions.
-
Censys counts 71% fewer internet-visible StoreView hosts in France
Censys counted 1,825 internet-visible Danfoss StoreView hosts in France on 11 October and 537 on 14 October; the figures do not measure confirmed compromises or fixes.
-
Citizen Lab confirms targeted-ad spyware infections at Al Jazeera
Citizen Lab links confirmed Candiru spyware infections at Al Jazeera to targeted online advertisements, while distinguishing infections from wider exposure to surveillance-related advertising infrastructure.
-
Fake WatchGuard VPN site steals credentials before offering genuine installer
Huntress has analysed a fake WatchGuard VPN download page that collects server and account details, then offers a genuine signed installer instead of malware.