BetaIT-Hub is in early access — your feedback helps us improve. Use the chat or email [email protected]

Latest
Confidential Computing on CPU and GPU Systems: How AI Data Centers Protect Data in UseHackRead · 38m agoAxon Is Another License Plate Surveillance CompanySchneier on Security · 56m agoCoca-Cola Reveals Subsidiary Fairlife Suffered Data BreachInfosecurity Magazine · 1h agoFake IT Calls on Microsoft Teams Lead to GoGRPC Backdoor InfectionsHackRead · 1h agoNVIDIA’s Open Secure AI Alliance Is Missing Some Big NamesInfosecurity Magazine · 2h agoData breach at medical billing firm MCBS affects 1.26 million peopleBleepingComputer · 2h agoNew CREST AI Standards to Deliver AI-Enabled Pentesting AccreditationInfosecurity Magazine · 3h agoCritical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging InThe Hacker News · 3h agoResearcher Says AI Helped Develop Linux Traffic-Control Race Into Root ExploitThe Hacker News · 3h agoRapid7 and Exclusive Networks expand partnership to modernize security operations and accelerate customer successRapid7 · 4h agoAutoIT Payload Injector , (Tue, Jul 28th)SANS ISC · 4h agoMicrosoft Says New Cybersecurity AI Model Helps MDASH Hit 95.95% at Half the CostThe Hacker News · 5h agoAttackers Exploit Arista VeloCloud Orchestrator Command Injection FlawThe Hacker News · 7h agoISC Stormcast For Tuesday, July 28th, 2026 https://isc.sans.edu/podcastdetail/10026, (Tue, Jul 28th)SANS ISC · 10h agoHackers target US firms in FastJson RCE zero-day attacksBleepingComputer · 12h agoConfidential Computing on CPU and GPU Systems: How AI Data Centers Protect Data in UseHackRead · 38m agoAxon Is Another License Plate Surveillance CompanySchneier on Security · 56m agoCoca-Cola Reveals Subsidiary Fairlife Suffered Data BreachInfosecurity Magazine · 1h agoFake IT Calls on Microsoft Teams Lead to GoGRPC Backdoor InfectionsHackRead · 1h agoNVIDIA’s Open Secure AI Alliance Is Missing Some Big NamesInfosecurity Magazine · 2h agoData breach at medical billing firm MCBS affects 1.26 million peopleBleepingComputer · 2h agoNew CREST AI Standards to Deliver AI-Enabled Pentesting AccreditationInfosecurity Magazine · 3h agoCritical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging InThe Hacker News · 3h agoResearcher Says AI Helped Develop Linux Traffic-Control Race Into Root ExploitThe Hacker News · 3h agoRapid7 and Exclusive Networks expand partnership to modernize security operations and accelerate customer successRapid7 · 4h agoAutoIT Payload Injector , (Tue, Jul 28th)SANS ISC · 4h agoMicrosoft Says New Cybersecurity AI Model Helps MDASH Hit 95.95% at Half the CostThe Hacker News · 5h agoAttackers Exploit Arista VeloCloud Orchestrator Command Injection FlawThe Hacker News · 7h agoISC Stormcast For Tuesday, July 28th, 2026 https://isc.sans.edu/podcastdetail/10026, (Tue, Jul 28th)SANS ISC · 10h agoHackers target US firms in FastJson RCE zero-day attacksBleepingComputer · 12h ago

Security & IT News

Live

Real-time news from 13+ trusted sources — BleepingComputer, The Hacker News, Krebs on Security, Dark Reading & more.

1361 results in Vulnerability

VulnerabilityFortinet PSIRT·504d ago
Pre-authentication Denial of Service attack in OpenSSH - CVE-2025-26466

CVSSv3 Score: 5.9 CVE-2025-26466A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack. Revised on 2026-05-25 00:00:00