Tech News
All News AI & ML Architecture DevOps Open Source Programming Team Management Testing & QA Web

DevOps

⚑ Report a Problem

Latest DevOps news from Tech News

All topics agents ai api architecture automation aws backend beginners cloud database devchallenge devops docker javascript kubernetes llm machinelearning mcp node opensource performance productivity programming python security showdev testing tutorial typescript webdev
All EN RU
EN

ICS-Sniper: Estimating Critical Time Windows in Encrypted SCADA Traffic for Targeted Packet Dropping

1. Basic Information Article Name: ICS-Sniper: A Targeted Blackhole Attack on Encrypted ICS Traffic Source: University of British Columbia researche…

securitythreatintel
Dev.to Oct 17, 2026, 07:25 UTC
EN

BlockStrap / CVE-2026-103849: Unauthenticated RCE via Two-Stage Directive Processing in Magento and Adobe Commerce

1. Basic Information Article Name: BlockStrap: Magento and Adobe Commerce RCE (CVE-2026-103849) Published By: Sansec Publication Date: 2026-10-15 Up…

securitythreatintel
Dev.to Oct 17, 2026, 07:25 UTC
EN

Langflow CVE-2026-105740: RCE via Authenticated MCP Stdio, 2,023 Exploitation Attempts Observed

1. Basic Information Article Name: CVE-2026-105740 Exploitation Observed — langflow Source: Previdian Published Date: 2026-10-05 Updated Date: 2026-…

securitythreatintel
Dev.to Oct 17, 2026, 07:25 UTC
EN

BeyondTrust CVE-2026-102764: ARMORY CASTLE Exploits Zero-Day to Deploy SAWFLY and BARECLAW

1. Overview Report Title: ARMORY CASTLE Exploits BeyondTrust Source: Google Threat Intelligence Group Publication Date: 2026-10-15 Updated Date: Non…

securitythreatintel
Dev.to Oct 17, 2026, 07:25 UTC
EN

AI-Assisted OT Lab: Equipment Control in Just Over 16 Minutes from a Breached Perimeter; Robotic Arm Moved in a Separate Test

1. Basic Information Article Title: AI Takes Control of Robotic Arm in 16 Minutes Flat Source: Dark Reading Publication Date: 2026-10-16 Updated Dat…

securitythreatintel
Dev.to Oct 17, 2026, 07:25 UTC
EN

PEERSTITCH: Theft of 500+ Firewall Configurations and Payload Injection into FortiGate Daemons

1. Overview Article Title : Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant Publisher : Unit 42 Publication Date : 2026-10-14 Original Sou…

securitythreatintel
Dev.to Oct 15, 2026, 15:24 UTC
EN

Package Manager Integrity Study: Only 2 of 25 Verified All Downloads by Default in Tests

1. Basic Information Article Title : Package managers have an integrity problem Publisher : Trail of Bits Original : Trail of Bits Publication Date…

securitythreatintel
Dev.to Oct 15, 2026, 15:24 UTC
EN

Hirudo: Replaces Banking Apps to Tamper with Local Signature, Accessibility, and Play Integrity Checks

1. Basic Information Article Name : Hirudo: From Fake Updates to Patched Banking Apps Publisher : ThreatFabric Publication Date : 2026-10-14 Origina…

securitythreatintel
Dev.to Oct 15, 2026, 15:23 UTC
EN

SneakPeek: Claude Code Desktop Preview Can Exfiltrate Local Secrets After Repository Cloning and a File Review Request

1. Basic Information Article Name : SneakPeek: How the Preview Pane in Claude Code Desktop Can Exfiltrate Your Data Publisher : Noma Labs Publicatio…

securitythreatintel
Dev.to Oct 15, 2026, 15:23 UTC
EN

Storm-3119/Storm-2990: YAM Store and CoGUI Infrastructure Behind Over One Billion Phishing Emails and SMS Messages

1. Overview Article Title : The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime Publisher : Microsoft Public…

securitythreatintel
Dev.to Oct 15, 2026, 15:23 UTC
EN

Insider Active Directory Sabotage: A Hidden VM Used to Schedule Account Deletions and Password Resets

1. Basic Information Article Name : Former Employee of Industrial Company Sentenced to 32 Months in Prison for Computer Attack and Extortion Source…

securitythreatintel
Dev.to Oct 11, 2026, 22:30 UTC
EN

Supply Chain Sabotage: npm, GPU Telemetry & Korean Bank AI Exploitation

Originally published on satyamrastogi.com Tensorlake npm SDK compromise, exposed NVIDIA GPU monitors, and AI-driven Korean bank breaches reveal syst…

securitycybersecuritynewsthreatintel
Dev.to Oct 10, 2026, 17:25 UTC
EN

MATCHBOIL: UAC-0099 Targets Ukrainian Organizations with Two-Minute C2 Polling and Sandbox Evasion

1. Overview Article Title : MATCHBOIL: New tricks, same old evil intentions Publisher : ESET Research Publication Date : 2026-10-08 Original Source…

securitythreatintel
Dev.to Oct 9, 2026, 01:28 UTC
EN

DTU Breach: IAM Data Theft May Affect Up to 200,000 People

1. Basic Information Original Title: Cyberattack on DTU: Notification of a personal data breach Source: Technical University of Denmark Published: 2…

securitythreatintel
Dev.to Oct 4, 2026, 03:21 UTC
EN

Truffle Security: Over 540,000 Valid Credentials Confirmed in Public GitHub Repositories

1. Overview Report Title : GitHub Repos Exposed 543,699 Credentials. Nobody Revoked Them. Publisher : Truffle Security Publication Date : 2026-09-29…

securitythreatintel
Dev.to Oct 1, 2026, 14:27 UTC
EN

SharePoint CVE-2026-65660: Two-Stage Web Shell Deployment Attempts on Sites Allowing Anonymous Access

1. Overview Article Title : CVE-2026-65660: Previdian observes two-stage SharePoint exploitation attempts Publisher : Previdian Publication Date : S…

securitythreatintel
Dev.to Sep 28, 2026, 11:22 UTC
EN

Cloudflare Containers: Vulnerability Allowing Reading of Residual Data from Other Tenants via Reused Blocks

1. Overview Article Title : How Cloudflare addressed a cross-tenant data exposure vulnerability in Containers Publisher : Cloudflare Publication Dat…

securitythreatintel
Dev.to Sep 28, 2026, 11:18 UTC
EN

Oracle PeopleSoft CVE-2026-35273: WAF Bypassed via URL Normalization Mismatch to Deploy Web Shells and SIDEEYE

1. Overview Article Title : ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft Source : Google Threat Intelligence Group /…

securitythreatintel
Dev.to Sep 27, 2026, 02:21 UTC
EN

Mini Shai-Hulud Re-Exposure: Re-Enabled GitHub Action Repositories Trigger Malicious Code Execution in CI

1. Overview Article Title : Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud Publisher : Socket Publication Date : 2026…

securitythreatintel
Dev.to Sep 27, 2026, 02:18 UTC
EN

Elementor 4.3.0 and 4.3.1: CSRF Enables Administrator Account Creation via a Flawed REST Route Check

1. Basic Information Title: Cross-Site Request Forgery in Elementor Plugin Affecting 2 Million+ Sites Source: Patchstack Published: September 25, 20…

securitythreatintel
Dev.to Sep 26, 2026, 02:29 UTC
EN

TDengine CVE-2026-42542: Unauthenticated Integer Underflow Crashes taosd with a Single Packet

1. Basic Information Original Title: One Packet Can Take Down the Database Behind Industrial Operations: Ridge Security Discovers CVE-2026-42542 Sou…

securitythreatintel
Dev.to Sep 26, 2026, 02:25 UTC
EN

File Change Notification Side Channel: Estimating Keystroke Timing and Browsing Activity on Linux, Android, and Windows

1. Overview Original Title: File Notification Attacks: Side-Channel Leakage from the File-Notification System on Linux, Android, Windows, and macOS…

securitythreatintel
Dev.to Sep 26, 2026, 02:18 UTC
EN

MemTensor MemOS Supply Chain Attack: sckit Triggered by Python Imports and OpenClaw Runtime Hooks

1. Basic Information Original Title: The AI Ecosystem Has Worms Now: Inside the MemTensor Compromise Source: Semgrep Published Date: September 23, 2…

securitythreatintel
Dev.to Sep 26, 2026, 02:13 UTC
EN

SalesBleed: Zero-Click Chain Exfiltrating Data via DNS from Agentforce via Indirect Prompt Injection

1. Basic Information Original Title: SalesBleed: 0-Click Data Exfiltration on Agentforce Source: Zenity Labs Publication Date: 2026-09-24 Updated Da…

securitythreatintel
Dev.to Sep 26, 2026, 01:17 UTC
EN

Roundcube CVE-2026-48842: Active Exploitation Reported for Pre-Authentication SQL Injection in virtuser_query

1. Basic Information Original Title: Roundcube security advisory (AV26-503) – Update 1 Source: Canadian Centre for Cyber Security Published: May 25,…

securitythreatintel
Dev.to Sep 25, 2026, 10:24 UTC
EN

SolarWinds Observability Self-Hosted: Two Pre-Authentication RCE Vulnerabilities Fixed with Different Configuration Requirements

1. Basic Information Original Title: SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability (CVE-2026-28324) Source: SolarWinds Pu…

securitythreatintel
Dev.to Sep 25, 2026, 10:21 UTC
EN

CARBONATO: A Botnet Built Around an AI Agent via Exposed Docker APIs

1. Basic Information Original Title: CARBONATO: a botnet built around an AI agent Source: ThreatDown Published Date: 2026-09-22 Updated Date: None C…

securitythreatintel
Dev.to Sep 25, 2026, 10:20 UTC
EN

WordPress CVE-2026-87902: Probing and PHP File-Write Attempts Observed on Patch Day

1. Basic Information Original Title: CVE-2026-87902: Attackers Started Probing WordPress Sites Hours After the Patch Published Date: 2026-09-22 Upda…

securitythreatintel
Dev.to Sep 24, 2026, 11:23 UTC
EN

Check Point CVE-2026-93616: Actively Exploited Pre-Authentication Path Traversal Leading to Script Execution

1. Basic Information Original Title: CVE-2026-93616: Directory Traversal and File upload allows execution of arbitrary script on the Management Serv…

securitythreatintel
Dev.to Sep 23, 2026, 03:22 UTC
EN

BigDiskBuster: Public PoC Claims to Block Microsoft Defender Platform and Security Intelligence Updates

1. Basic Information Original Title: New Windows Defender zero-day blocks Microsoft antivirus updates Source: BleepingComputer Published Date: 2026-…

securitythreatintel
Dev.to Sep 23, 2026, 03:15 UTC

© Tech News — Headline Aggregator

English Русский
Sitemap Legal Notice Privacy Terms Copyright / Removal DSA Contact

Leaving the site

You are about to open an external website:

Continue →