Cyphere

We help businesses protect their most prized assets with our following service lines: ✔️ Technical risk advisory ✔️ Penetration testing/ethical hacking ✔️ Managed security services ✔️ Data privacy/GDPR ✔️ IT Security compliance #cybersecurity #pentesting #informationsecurity

CISA Adds Two Known Exploited Vulnerabilities to Catalog  CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-5430 WSO2 Multiple Products Path Traversal Vulnerability CVE-2026 @CISACyber

Exchange for breakfast: Turla’s Cereal tricks are not for kids

Microsoft Fixes Nearly 1,100 Security Vulnerabilities

CISA Adds Four Known Exploited Vulnerabilities to Catalog CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-85102 Check Point Multiple Products Improper Certificate Validat @CISACyber

CrowdStrike Advances AI Security and Safety from Endpoint to Cloud @crowdstrike

Financial Stability Board Sounds the Alarm Over Frontier AI Risks The Financial Stability Board has warned G20 banking leaders about the cyber risks of frontier AI @InfosecurityMag

CISA Announces Enhanced Reporting Form for Cyber Incidents 𝗢𝘂𝘁𝘀𝗺𝗮𝗿𝘁 𝘆𝗼𝘂𝗿 𝗮𝗱𝘃𝗲𝗿𝘀𝗮𝗿𝗶𝗲𝘀. 𝗝𝗼𝗶𝗻 𝘁𝗵𝗲 𝗰𝗼𝗻𝘃𝗲𝗿𝘀𝗮𝘁𝗶𝗼𝗻.

Critical security issue affecting PHP

Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platforms to steal Microsoft and Google account credentia

Critical Langflow flaws enable authentication bypass and RCE 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝘀𝗼𝗿𝘁𝗲𝗱. 𝗪𝗵𝗮𝘁'𝘀 𝗻𝗲𝘅𝘁?

Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations Aurora ransomware operators are abusing SpaceX’s Cursor Agent AI tool to conduct tasks such as reconnaissance and exploitation activities @InfosecurityMag

Nearly million exposed secrets targeted in new revocation program Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke million publicly exposed secrets that remain valid. [...]

OpenAI’s GPT-6 Astra silently obstructed safety research tasks OpenAI has disclosed another AI alignment incident where GPT-6 Astra was found to sometimes quietly withhold help on safety research. [...]

OpenSSH flaw lets attackers log into password-disabled Linux accounts A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to block password authentication, simply by e

Manchester Airports Group Hit by Cyber Incident Customer data linked to bookings and airport Wi-Fi registrations at Manchester, Stansted and East Midlands airports has been accessed by an unauthorized third party @InfosecurityMag

mSecure password manager hack prompts password reset warnings mSeven Software is warning current and former mSecure password manager customers to change passwords, reset two-factor authentication, and remove passkeys following a cyberattack that reportedly exposed an encrypted c

CISA, FBI, HHS, USDA, and DOT Urge Critical Infrastructure To Strengthen Industrial Refrigeration and Cold Chain Monitoring Systems Cybersecurity 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝘀𝗼𝗿𝘁𝗲𝗱. 𝗪𝗵𝗮𝘁'𝘀 𝗻𝗲𝘅𝘁?

Introducing a new AI chapter in the NCSC research problem book

YARA-X Release, (Sat, Oct 31st) YARA-X's is a bugfix version, it brings 2 bugfixes. @sans_isc

What Makes a Good Security Agent? 5 Lessons from the AgentWorks Hackathon @crowdstrike